b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019", 0xa3) 21:00:10 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab81025", 0x96) 21:00:11 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db979", 0x64) 21:00:11 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = getgid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, r1}, 0x0, 0x0, 0x9128, 0x90b3}) r2 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000080)) 21:00:11 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019", 0xa3) 21:00:11 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019c1ea80", 0xa6) 21:00:11 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab81025", 0x96) 21:00:11 executing program 0: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db979", 0x64) 21:00:11 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db979", 0x64) 21:00:11 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x2d, 0x88000) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xc0010, r1, 0x9) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="2a47934bcae639515485fee077bea23f4045dbb3f3e45878a1e2cbf1b97117bfc6a799e5c6307be01d525c9eb7df6d07482f1b66d47af68cb279e29f1a64e168c25621c6df6db30fc514d76fc46d9239afb93f6dcd7ca29ec2d95c912b93f5330156afe980810f9d8f8cb2d35d7717e01d027d5362e28d1b59531022784436f9a24c38a07e346e92851d2469dc7f7e871a49f788f7be0e83ccd407149fbe278297781c6af08bb1381e5dc89067f55df234c945713df3065a0f61b97256929cdf981f3420ebeb571a0ec8fb9c6e1837d7e21de879e42d0b2d7a83606afa0f8e") 21:00:11 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019c1ea80", 0xa6) 21:00:11 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019c1ea80", 0xa6) 21:00:11 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab81025", 0x96) 21:00:11 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:11 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db979", 0x64) 21:00:11 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xee01, 0xee01}}) 21:00:11 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019c1ea80", 0xa6) 21:00:11 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019c1ea80", 0xa6) 21:00:11 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab81025", 0x96) 21:00:11 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:11 executing program 2: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db979", 0x64) 21:00:11 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019c1ea80", 0xa6) 21:00:11 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019c1ea8081a5", 0xa8) 21:00:11 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab81025", 0x96) 21:00:11 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:11 executing program 2: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db979", 0x64) 21:00:11 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) r1 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) 21:00:12 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019c1ea8081a5", 0xa8) 21:00:12 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab81025", 0x96) 21:00:12 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:12 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019c1ea8081a5", 0xa8) 21:00:12 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x2f, 0x0, 0x8, 0x0, 0x10, @ipv4={[], [], @multicast2}, @remote, 0x7800, 0x40, 0x8, 0x3}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00* w\x00'], 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r7, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001640)={'syztnl0\x00', &(0x7f00000015c0)={'ip6tnl0\x00', 0x0, 0x2d, 0x98, 0x1, 0x401, 0x20, @dev={0xfe, 0x80, [], 0x2e}, @private1={0xfc, 0x1, [], 0x1}, 0x7800, 0x10, 0x8, 0x758}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001780)={&(0x7f0000001680)={0xd8, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0xbc, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x81, 0x4, 0x1, 0xba1}, {0xff, 0x0, 0x8, 0x95}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) 21:00:12 executing program 2: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db979", 0x64) 21:00:12 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019c1ea8081a5", 0xa8) 21:00:12 executing program 3: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab81025", 0x96) 21:00:12 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:12 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019c1ea8081a5", 0xa8) 21:00:12 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:12 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019c1ea8081a5", 0xa8) 21:00:12 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80000) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) 21:00:12 executing program 3: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab81025", 0x96) 21:00:12 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:12 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab81025", 0x96) 21:00:12 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:12 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db979", 0x64) 21:00:12 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db979", 0x64) 21:00:12 executing program 3: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab81025", 0x96) 21:00:12 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f", 0x32) 21:00:12 executing program 4: bind$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) bind$pptp(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x2, {0x0, @loopback}}, 0x1e) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) shmctl$SHM_UNLOCK(r0, 0xc) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) 21:00:12 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:12 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x13f}}, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000001c0)=""/238) 21:00:12 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:12 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/174) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) 21:00:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:13 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) r1 = shmget$private(0x0, 0x4000, 0x6e304133462b0aa1, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0xb) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) io_uring_setup(0x1d15, &(0x7f00000000c0)={0x0, 0x1b25, 0x20, 0x8008002, 0x32a, 0x0, r2}) 21:00:13 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:13 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0xf1000) 21:00:13 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:13 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xf1000) 21:00:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:13 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) r1 = shmget$private(0x0, 0x4000, 0x6e304133462b0aa1, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0xb) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) io_uring_setup(0x1d15, &(0x7f00000000c0)={0x0, 0x1b25, 0x20, 0x8008002, 0x32a, 0x0, r2}) 21:00:13 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:13 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000180)=""/174) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) 21:00:13 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:13 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xf1000) 21:00:13 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019c1ea8081a520cd7c831d252f10713f7897d4486434e48f8bbc93e0661f75a75d9a3b91ad", 0xc7) 21:00:13 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) r1 = shmget$private(0x0, 0x4000, 0x6e304133462b0aa1, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0xb) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) io_uring_setup(0x1d15, &(0x7f00000000c0)={0x0, 0x1b25, 0x20, 0x8008002, 0x32a, 0x0, r2}) 21:00:13 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:13 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada76301", 0x19) 21:00:13 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xf1000) 21:00:13 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) r1 = shmget$private(0x0, 0x4000, 0x6e304133462b0aa1, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0xb) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) 21:00:13 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019c1ea8081a520cd7c831d252f10713f7897d4486434e48f8bbc93e0661f75a75d9a3b91ad", 0xc7) 21:00:13 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f", 0x32) 21:00:13 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada76301", 0x19) 21:00:13 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) r1 = shmget$private(0x0, 0x4000, 0x6e304133462b0aa1, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0xb) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 21:00:13 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c2400ef27fcab7ce646d60c1210a23f1dab8102507d2bad740c8a53efc61ee1019c1ea8081a520cd7c831d252f10713f7897d4486434e48f8bbc93e0661f75a75d9a3b91ad", 0xc7) 21:00:13 executing program 1: mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0xf1000) 21:00:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada76301", 0x19) 21:00:13 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:14 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:14 executing program 1: mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0xf1000) 21:00:14 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xffffffffffffffff, 0xee01}, 0x0, 0x0, 0x0, 0x2}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x101000, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0xf1000) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 21:00:14 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) r1 = shmget$private(0x0, 0x4000, 0x6e304133462b0aa1, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0xb) 21:00:14 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e057077", 0x4b) 21:00:14 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd9", 0x26) 21:00:14 executing program 1: mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0xf1000) 21:00:14 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xffffffffffffffff, 0xee01}, 0x0, 0x0, 0x0, 0x2}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x101000, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0xf1000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) 21:00:14 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) r1 = shmget$private(0x0, 0x4000, 0x6e304133462b0aa1, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) 21:00:14 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:14 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e057077", 0x4b) 21:00:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106", 0x1a) 21:00:14 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xf1000) 21:00:14 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) shmget$private(0x0, 0x4000, 0x6e304133462b0aa1, &(0x7f0000ffb000/0x4000)=nil) 21:00:14 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada76301", 0x19) 21:00:14 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee00, 0xffffffffffffffff, 0xee01}, 0x0, 0x0, 0x0, 0x2}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x101000, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r1, 0xf1000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) 21:00:14 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e057077", 0x4b) 21:00:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e", 0xe) 21:00:14 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xf1000) 21:00:14 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada76301", 0x19) 21:00:14 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_INFO(r1, 0x3, &(0x7f00000000c0)=""/66) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/54) 21:00:14 executing program 4: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x6e304133462b0aa1, &(0x7f0000ffb000/0x4000)=nil) 21:00:14 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab08", 0x71) 21:00:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:14 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xf1000) 21:00:14 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada76301", 0x19) 21:00:15 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/189) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) 21:00:15 executing program 4: shmget$private(0x0, 0x4000, 0x6e304133462b0aa1, &(0x7f0000ffb000/0x4000)=nil) 21:00:15 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab08", 0x71) 21:00:15 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xf1000) 21:00:15 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:15 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:15 executing program 4: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 21:00:15 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd9", 0x26) 21:00:15 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xf1000) 21:00:15 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab08", 0x71) 21:00:15 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:15 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:15 executing program 4: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 21:00:15 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106", 0x1a) 21:00:15 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d7ddc995663e39d0f52612054174894e3c240", 0x84) 21:00:15 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xf1000) 21:00:15 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e61", 0x8) 21:00:15 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:15 executing program 4: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 21:00:15 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e", 0xe) 21:00:15 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71b44db9799732b2614268cfe90eadcbab084d", 0x72) 21:00:15 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0xf1000) 21:00:15 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:15 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:15 executing program 5: write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:15 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:15 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71", 0x60) 21:00:15 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0xf1000) 21:00:16 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 5: write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 1: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0xf1000) 21:00:16 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f523", 0x4e) 21:00:16 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 5: write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 1: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 21:00:16 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e8627590", 0x3c) 21:00:16 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:16 executing program 4: write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e61", 0x8) 21:00:16 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4", 0x2a) 21:00:16 executing program 4: write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:16 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada763", 0x18) 21:00:16 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:16 executing program 5: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 4: write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:16 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:17 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad", 0x6) 21:00:17 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e", 0x7) 21:00:17 executing program 1: write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:17 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:17 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:17 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:17 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad", 0x6) 21:00:17 executing program 1: write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:17 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e", 0x7) 21:00:17 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:17 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:17 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:17 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad", 0x6) 21:00:17 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e", 0x7) 21:00:17 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:17 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:17 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:17 executing program 1: write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:17 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e81", 0xf) 21:00:17 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:17 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:17 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:17 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:17 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e81", 0xf) 21:00:17 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:17 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:18 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:18 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e", 0x7) 21:00:18 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:18 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e81", 0xf) 21:00:18 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:18 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:18 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e", 0x7) 21:00:18 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:18 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:18 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f5320", 0x14) 21:00:18 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:18 executing program 5: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:18 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e", 0x7) 21:00:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:18 executing program 0: write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:18 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124", 0x10) 21:00:18 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:18 executing program 5: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:18 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f5320", 0x14) 21:00:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:18 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240", 0xc) 21:00:18 executing program 0: write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:18 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:18 executing program 5: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:18 executing program 0: write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:18 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e61", 0x8) 21:00:18 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e81", 0xf) 21:00:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:18 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:19 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:19 executing program 0: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:19 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012", 0x4) 21:00:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:19 executing program 4: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:19 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e81", 0xf) 21:00:19 executing program 0: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:19 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:19 executing program 4: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:19 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012", 0x4) 21:00:19 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e615204c240d01e8124be3f53206cada7630106e7da78573c0edab79ba52dd953ed6fc4e0e0699869db4a4f0046230dae34e86275903bb5826cf6f6057e7ad1055e05707719f5234af324e3323a23556ac8db7727253ce0ac71", 0x60) 21:00:19 executing program 0: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:19 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:19 executing program 4: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:19 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012", 0x4) 21:00:19 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x2000, 0xe71e76d98695738c, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}, 0xfffffffc, 0xfffffffffffffffd}) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001480)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001440)='./file0\x00', 0x1, 0x800, 0x1}, 0x6b) r4 = getgid() r5 = getpid() shmctl$IPC_SET(r2, 0x1, &(0x7f00000014c0)={{0x0, 0xffffffffffffffff, r3, 0x0, r4, 0x8, 0x1000}, 0x3, 0xffffffff, 0x1ff, 0xfffffffffffffff9, 0xffffffffffffffff, r5, 0x1}) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r6, 0x0) shmctl$SHM_UNLOCK(r6, 0xc) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 21:00:19 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:19 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:19 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:19 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:19 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad", 0x6) 21:00:19 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000080)=""/108) r3 = getuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, r3, 0x0, 0x108}, 0x4000, 0x0, 0x4}) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) shmat(r6, &(0x7f0000ffc000/0x1000)=nil, 0x5000) 21:00:19 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:19 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:19 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:19 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:20 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad", 0x6) 21:00:20 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000080)=""/108) r3 = getuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, r3, 0x0, 0x108}, 0x4000, 0x0, 0x4}) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) shmat(r6, &(0x7f0000ffc000/0x1000)=nil, 0x5000) 21:00:20 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:20 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc", 0x2) 21:00:20 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:20 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad", 0x6) 21:00:20 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:20 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000080)=""/108) r3 = getuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, r3, 0x0, 0x108}, 0x4000, 0x0, 0x4}) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) shmat(r6, &(0x7f0000ffc000/0x1000)=nil, 0x5000) 21:00:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:20 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:20 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:20 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:20 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e", 0x7) 21:00:20 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000080)=""/108) r3 = getuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, r3, 0x0, 0x108}, 0x4000, 0x0, 0x4}) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) shmat(r6, &(0x7f0000ffc000/0x1000)=nil, 0x5000) 21:00:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:20 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:20 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:20 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:20 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e", 0x7) 21:00:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:20 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:20 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:20 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:20 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012b2ad6e", 0x7) 21:00:20 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:20 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:21 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:21 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:21 executing program 0: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:21 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000080)=""/108) r3 = getuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, r3, 0x0, 0x108}, 0x4000, 0x0, 0x4}) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r6 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) shmat(r6, &(0x7f0000ffc000/0x1000)=nil, 0x5000) 21:00:21 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:21 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:21 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) accept4$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @bcast, @bcast, @remote, @null, @null, @rose, @bcast]}, &(0x7f0000000040)=0x48, 0x100000) r1 = socket(0x9, 0x2, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000001c0)) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000180)) 21:00:21 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:21 executing program 2: write$fb(0xffffffffffffffff, &(0x7f0000000080)='>', 0x1) 21:00:21 executing program 0: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:21 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:21 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000080)=""/108) r3 = getuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, r3, 0x0, 0x108}, 0x4000, 0x0, 0x4}) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000100)=""/7) r7 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) shmat(r7, &(0x7f0000ffc000/0x1000)=nil, 0x5000) 21:00:21 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) accept4$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @bcast, @bcast, @remote, @null, @null, @rose, @bcast]}, &(0x7f0000000040)=0x48, 0x100000) r1 = socket(0x9, 0x2, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000001c0)) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000180)) 21:00:21 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:21 executing program 0: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc2012b2", 0x5) 21:00:21 executing program 2: write$fb(0xffffffffffffffff, &(0x7f0000000080)='>', 0x1) 21:00:21 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:21 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000080)=""/108) r3 = getuid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, r3, 0x0, 0x108}, 0x4000, 0x0, 0x4}) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000100)=""/7) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) 21:00:21 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) accept4$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @bcast, @bcast, @remote, @null, @null, @rose, @bcast]}, &(0x7f0000000040)=0x48, 0x100000) r1 = socket(0x9, 0x2, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000001c0)) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000180)) 21:00:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000080)={'!'}, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/slabinfo\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001380), &(0x7f00000013c0)=0x6) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000100)={0x6, [0x3ff, 0x2, 0xfdd, 0x5, 0x7f, 0x6]}, &(0x7f0000000140)=0x10) 21:00:21 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:21 executing program 2: write$fb(0xffffffffffffffff, &(0x7f0000000080)='>', 0x1) 21:00:21 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x14, &(0x7f0000000380), 0x4) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x6, 0x0, 0x8400) 21:00:21 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:21 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) accept4$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @bcast, @bcast, @remote, @null, @null, @rose, @bcast]}, &(0x7f0000000040)=0x48, 0x100000) socket(0x9, 0x2, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)) 21:00:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000080)={'!'}, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/slabinfo\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001380), &(0x7f00000013c0)=0x6) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000100)={0x6, [0x3ff, 0x2, 0xfdd, 0x5, 0x7f, 0x6]}, &(0x7f0000000140)=0x10) 21:00:22 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) [ 1445.330187][T25048] sctp: [Deprecated]: syz-executor.3 (pid 25048) Use of int in max_burst socket option deprecated. [ 1445.330187][T25048] Use struct sctp_assoc_value instead 21:00:22 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:22 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:22 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) accept4$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @bcast, @bcast, @remote, @null, @null, @rose, @bcast]}, &(0x7f0000000040)=0x48, 0x100000) socket(0x9, 0x2, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) 21:00:22 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x14, &(0x7f0000000380), 0x4) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x6, 0x0, 0x8400) 21:00:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000080)={'!'}, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/slabinfo\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001380), &(0x7f00000013c0)=0x6) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000100)={0x6, [0x3ff, 0x2, 0xfdd, 0x5, 0x7f, 0x6]}, &(0x7f0000000140)=0x10) 21:00:22 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:22 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:22 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = geteuid() r3 = getgid() r4 = getpid() r5 = getpid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x3, r2, r3, 0x0, 0x0, 0x5a, 0x3}, 0x2, 0xfffffffffffffff9, 0x7fffffff, 0x5, r4, r5, 0x6}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0x0, r3, 0xee01, 0x0, 0x0, 0x1}}) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) 21:00:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000080)={'!'}, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/slabinfo\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001380), &(0x7f00000013c0)=0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) [ 1445.642996][T25066] sctp: [Deprecated]: syz-executor.3 (pid 25066) Use of int in max_burst socket option deprecated. [ 1445.642996][T25066] Use struct sctp_assoc_value instead 21:00:22 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) accept4$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @bcast, @bcast, @remote, @null, @null, @rose, @bcast]}, &(0x7f0000000040)=0x48, 0x100000) socket(0x9, 0x2, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 21:00:22 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:22 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x14, &(0x7f0000000380), 0x4) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x6, 0x0, 0x8400) 21:00:22 executing program 2: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:22 executing program 1: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xf4f5, 0x101000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) read$smackfs_logging(r0, &(0x7f0000000100), 0x14) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000080)={'!'}, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/slabinfo\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001380), &(0x7f00000013c0)=0x6) [ 1445.940620][T25082] sctp: [Deprecated]: syz-executor.3 (pid 25082) Use of int in max_burst socket option deprecated. [ 1445.940620][T25082] Use struct sctp_assoc_value instead 21:00:22 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) accept4$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @bcast, @bcast, @remote, @null, @null, @rose, @bcast]}, &(0x7f0000000040)=0x48, 0x100000) socket(0x9, 0x2, 0x2) 21:00:22 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:22 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:22 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x14, &(0x7f0000000380), 0x4) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 21:00:22 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) accept4$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @bcast, @bcast, @remote, @null, @null, @rose, @bcast]}, &(0x7f0000000040)=0x48, 0x100000) socket(0x9, 0x2, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 21:00:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000080)={'!'}, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/slabinfo\x00', 0x0, 0x0) 21:00:22 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) accept4$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @bcast, @bcast, @remote, @null, @null, @rose, @bcast]}, &(0x7f0000000040)=0x48, 0x100000) [ 1446.231659][T25101] sctp: [Deprecated]: syz-executor.3 (pid 25101) Use of int in max_burst socket option deprecated. [ 1446.231659][T25101] Use struct sctp_assoc_value instead 21:00:23 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:23 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000080)={'!'}, 0x2) 21:00:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000080)={'!'}, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/slabinfo\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001380), &(0x7f00000013c0)=0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 21:00:23 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:23 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) 21:00:23 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:23 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc20", 0x3) 21:00:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) [ 1446.571599][T25119] sctp: [Deprecated]: syz-executor.3 (pid 25119) Use of int in max_burst socket option deprecated. [ 1446.571599][T25119] Use struct sctp_assoc_value instead 21:00:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000080)={'!'}, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/slabinfo\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001380), &(0x7f00000013c0)=0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 21:00:23 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) 21:00:23 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:23 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:23 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc20", 0x3) 21:00:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000080)={'!'}, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/slabinfo\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001380), &(0x7f00000013c0)=0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 21:00:23 executing program 5: ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@bcast, @default}) 21:00:23 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:23 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:23 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc20", 0x3) 21:00:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000080)={'!'}, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/slabinfo\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001380), &(0x7f00000013c0)=0x6) 21:00:23 executing program 5: ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@bcast, @default}) 21:00:23 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)='>', 0x1) 21:00:23 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012", 0x4) 21:00:23 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:23 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000080)={'!'}, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/slabinfo\x00', 0x0, 0x0) 21:00:24 executing program 5: ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@bcast, @default}) 21:00:24 executing program 2: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)='>', 0x1) 21:00:24 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012", 0x4) 21:00:24 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:24 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000080)={'!'}, 0x2) 21:00:24 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) 21:00:24 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012", 0x4) [ 1447.574150][T25178] sctp: [Deprecated]: syz-executor.3 (pid 25178) Use of int in max_burst socket option deprecated. [ 1447.574150][T25178] Use struct sctp_assoc_value instead 21:00:24 executing program 2: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)='>', 0x1) 21:00:24 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:24 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) 21:00:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:24 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:24 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc2012", 0x4) 21:00:24 executing program 2: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)='>', 0x1) [ 1447.874383][T25195] sctp: [Deprecated]: syz-executor.3 (pid 25195) Use of int in max_burst socket option deprecated. [ 1447.874383][T25195] Use struct sctp_assoc_value instead 21:00:24 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) 21:00:24 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:24 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:24 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:24 executing program 3: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:24 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@bcast, @default}) 21:00:24 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)=0x1b) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) [ 1448.201971][T25215] sctp: [Deprecated]: syz-executor.3 (pid 25215) Use of int in max_burst socket option deprecated. [ 1448.201971][T25215] Use struct sctp_assoc_value instead 21:00:25 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) 21:00:25 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:25 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@bcast, @default}) 21:00:25 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:25 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:25 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc20", 0x3) 21:00:25 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@bcast, @default}) [ 1448.503102][T25233] sctp: [Deprecated]: syz-executor.3 (pid 25233) Use of int in max_burst socket option deprecated. [ 1448.503102][T25233] Use struct sctp_assoc_value instead 21:00:25 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:25 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:25 executing program 4: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:25 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc20", 0x3) 21:00:25 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:25 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:25 executing program 4: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:25 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc20", 0x3) 21:00:25 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) 21:00:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:25 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:25 executing program 4: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:25 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:25 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) 21:00:25 executing program 0: write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc20", 0x3) 21:00:25 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:26 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:26 executing program 1: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:26 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:26 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) 21:00:26 executing program 0: write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc20", 0x3) 21:00:26 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) 21:00:26 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:26 executing program 1: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:26 executing program 0: write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc20", 0x3) 21:00:26 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) 21:00:26 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:26 executing program 5: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:26 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:26 executing program 0: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc20", 0x3) 21:00:26 executing program 1: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:26 executing program 5: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:26 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:26 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) 21:00:26 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:26 executing program 0: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc20", 0x3) 21:00:26 executing program 1: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:26 executing program 5: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:26 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:26 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:26 executing program 0: r0 = syz_open_dev$vcsa(0x0, 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc20", 0x3) 21:00:26 executing program 2: ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, 0x0) 21:00:26 executing program 5: write$smackfs_label(0xffffffffffffffff, 0x0, 0x0) 21:00:26 executing program 1: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:27 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, 0x0, 0x0) 21:00:27 executing program 2: ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, 0x0) 21:00:27 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc20", 0x3) 21:00:27 executing program 5: write$smackfs_label(0xffffffffffffffff, 0x0, 0x0) 21:00:27 executing program 1: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:27 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, 0x0, 0x0) 21:00:27 executing program 2: ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, 0x0) 21:00:27 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc20", 0x3) 21:00:27 executing program 5: write$smackfs_label(0xffffffffffffffff, 0x0, 0x0) 21:00:27 executing program 1: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:27 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, 0x0, 0x0) 21:00:27 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) 21:00:27 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc20", 0x3) 21:00:27 executing program 5: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:27 executing program 1: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:27 executing program 3: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000000)={@bcast, @default}) 21:00:27 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:27 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) 21:00:27 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc20", 0x3) 21:00:27 executing program 5: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:27 executing program 1: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:27 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:27 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) 21:00:27 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc20", 0x3) 21:00:27 executing program 5: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) [ 1451.283851][T25404] sctp: [Deprecated]: syz-executor.3 (pid 25404) Use of int in max_burst socket option deprecated. [ 1451.283851][T25404] Use struct sctp_assoc_value instead 21:00:28 executing program 1: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:28 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:28 executing program 2: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, 0x0) 21:00:28 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:28 executing program 5: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, 0x0, 0x0) 21:00:28 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x0) write$fb(r0, &(0x7f0000000080)="3ecc20", 0x3) 21:00:28 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000000)={@bcast, @default}) accept4$ax25(r0, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @bcast, @bcast, @remote, @null, @null, @rose, @bcast]}, &(0x7f0000000040)=0x48, 0x100000) 21:00:28 executing program 2: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, 0x0) 21:00:28 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:28 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:28 executing program 5: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, 0x0, 0x0) 21:00:28 executing program 0: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc20", 0x3) 21:00:28 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x14, &(0x7f0000000380), 0x4) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 21:00:28 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:28 executing program 2: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, 0x0) 21:00:28 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:28 executing program 5: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, 0x0, 0x0) [ 1451.857579][T25438] sctp: [Deprecated]: syz-executor.1 (pid 25438) Use of int in max_burst socket option deprecated. [ 1451.857579][T25438] Use struct sctp_assoc_value instead 21:00:28 executing program 0: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc20", 0x3) 21:00:28 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x14, &(0x7f0000000380), 0x4) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 21:00:28 executing program 4: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000180)=0x8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) 21:00:28 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:28 executing program 0: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(0xffffffffffffffff, &(0x7f0000000080)="3ecc20", 0x3) 21:00:28 executing program 5: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000080)="d8800b26d76992b123e47d73961326ec3bc24d4e8eec76335f8991d33569bcb8a2f7acc3c44cd122dc922722e96912b66830b15caf50acaba64971c37827857387a751437dc74dc112ca06ee5f5a9b93e77cf8969ba272128168779dbc03cc173e13bcea") bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) [ 1452.137753][T25455] sctp: [Deprecated]: syz-executor.1 (pid 25455) Use of int in max_burst socket option deprecated. [ 1452.137753][T25455] Use struct sctp_assoc_value instead 21:00:28 executing program 4: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:28 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000180)=0x8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) 21:00:29 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x14, &(0x7f0000000380), 0x4) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 21:00:29 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = accept4$ax25(r0, &(0x7f0000000180)={{0x3, @default}, [@netrom, @rose, @default, @null, @default, @bcast, @rose]}, &(0x7f0000000100)=0x48, 0x800) accept$ax25(r1, &(0x7f0000000080)={{0x3, @null}, [@netrom, @bcast, @netrom, @bcast, @null, @netrom, @netrom, @netrom]}, &(0x7f0000000200)=0xa6) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00'}) 21:00:29 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:29 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000001) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:29 executing program 4: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000180)=0x8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) [ 1452.495667][T25475] sctp: [Deprecated]: syz-executor.1 (pid 25475) Use of int in max_burst socket option deprecated. [ 1452.495667][T25475] Use struct sctp_assoc_value instead 21:00:29 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) 21:00:29 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:29 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000180)=0x8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:29 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:29 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) 21:00:29 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, 0x0, 0x0) [ 1452.817895][T25495] sctp: [Deprecated]: syz-executor.1 (pid 25495) Use of int in max_burst socket option deprecated. [ 1452.817895][T25495] Use struct sctp_assoc_value instead 21:00:29 executing program 3: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000180)=0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:29 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:29 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) 21:00:29 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:29 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:29 executing program 3: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:29 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000180)=0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:29 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:29 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) 21:00:30 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:30 executing program 3: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:30 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000180)=0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:30 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:30 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, &(0x7f00000000c0), 0x14) 21:00:30 executing program 3: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000080)={'!'}, 0x2) 21:00:30 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080), 0x0) 21:00:30 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x800, 0x0) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = socket(0x21, 0x800, 0x5) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000200), 0x4) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r4, 0x0, 0x0) bind$ax25(r4, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast]}, 0x48) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) write$cgroup_devices(r2, &(0x7f00000001c0)={'b', ' *:* ', 'm\x00'}, 0x8) 21:00:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:30 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, &(0x7f00000000c0), 0x14) 21:00:30 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:30 executing program 3: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:30 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:30 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) sendto$ax25(r1, &(0x7f00000000c0)="428f70e072d50c8c451ee59b859e152f3145fbbab464b5a49e72c6d935693ab693ba5c4723da5eb1d8d85fdf846f1a45a8a8de5fca3d18559e6616b84c467b610df28e66d2d4a9b087a9659ac87e1117d2916ff4a72c5a77c27d4aeb5e46a64f8fc01ceb95fa186651b2639afc0cffa604cf8d4beeff49fc6bbfc8e88cfe1257ed62d067a00c2b90489d9d55ed0f71", 0x8f, 0x54, &(0x7f0000000180)={{0x3, @null, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) 21:00:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) [ 1453.849078][T25553] sctp: [Deprecated]: syz-executor.1 (pid 25553) Use of int in max_burst socket option deprecated. [ 1453.849078][T25553] Use struct sctp_assoc_value instead 21:00:30 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, &(0x7f00000000c0), 0x14) 21:00:30 executing program 3: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:30 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:30 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:30 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:30 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) 21:00:30 executing program 3: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000080)={'!'}, 0x2) 21:00:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) [ 1454.200903][T25570] sctp: [Deprecated]: syz-executor.1 (pid 25570) Use of int in max_burst socket option deprecated. [ 1454.200903][T25570] Use struct sctp_assoc_value instead [ 1454.213152][T25573] sctp: [Deprecated]: syz-executor.4 (pid 25573) Use of int in max_burst socket option deprecated. [ 1454.213152][T25573] Use struct sctp_assoc_value instead 21:00:30 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:31 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:31 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:31 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) 21:00:31 executing program 3: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:31 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) [ 1454.439555][T25586] sctp: [Deprecated]: syz-executor.4 (pid 25586) Use of int in max_burst socket option deprecated. [ 1454.439555][T25586] Use struct sctp_assoc_value instead [ 1454.469411][T25587] sctp: [Deprecated]: syz-executor.1 (pid 25587) Use of int in max_burst socket option deprecated. [ 1454.469411][T25587] Use struct sctp_assoc_value instead 21:00:31 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) 21:00:31 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:31 executing program 3: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:31 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:31 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) 21:00:31 executing program 3: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:31 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:31 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:31 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$smackfs_logging(0xffffffffffffffff, &(0x7f00000000c0), 0x14) 21:00:31 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:31 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:31 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$smackfs_logging(0xffffffffffffffff, &(0x7f00000000c0), 0x14) 21:00:31 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:32 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$smackfs_logging(0xffffffffffffffff, &(0x7f00000000c0), 0x14) 21:00:32 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:32 executing program 3: setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$smackfs_logging(r0, 0x0, 0x0) 21:00:32 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xfd}, 0x18) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:32 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 3: setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$smackfs_logging(r0, 0x0, 0x0) 21:00:32 executing program 0: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:32 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 3: setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$smackfs_logging(r0, 0x0, 0x0) 21:00:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x40000) 21:00:32 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:32 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) [ 1456.287177][T25699] sctp_setsockopt_maxburst: 12 callbacks suppressed [ 1456.287197][T25699] sctp: [Deprecated]: syz-executor.0 (pid 25699) Use of int in max_burst socket option deprecated. [ 1456.287197][T25699] Use struct sctp_assoc_value instead 21:00:33 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$smackfs_logging(r0, 0x0, 0x0) 21:00:33 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, 0x0, 0x0) 21:00:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x40000) 21:00:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:33 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:33 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:33 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, 0x0, 0x0) [ 1456.681476][T25726] sctp: [Deprecated]: syz-executor.0 (pid 25726) Use of int in max_burst socket option deprecated. [ 1456.681476][T25726] Use struct sctp_assoc_value instead 21:00:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x40000) [ 1456.723405][T25729] sctp: [Deprecated]: syz-executor.5 (pid 25729) Use of int in max_burst socket option deprecated. [ 1456.723405][T25729] Use struct sctp_assoc_value instead 21:00:33 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, 0x0, 0x0) 21:00:33 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x40000) 21:00:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:33 executing program 1: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:00:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000) 21:00:33 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8a5, 0x1c1082) write$fb(r0, &(0x7f0000000080)="3ecc", 0x2) 21:00:33 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:34 executing program 1: syz_init_net_socket$ax25(0x3, 0x2, 0x0) read$smackfs_logging(0xffffffffffffffff, &(0x7f00000000c0), 0x14) 21:00:34 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000) 21:00:34 executing program 5: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:34 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x22, 0x800, 0x2) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf25030000000c00060002000000000000000400078008000100000000000c000500a2000000000000000c0003000300000000004d0000000300cb07000000004000"], 0x50}, 0x1, 0x0, 0x0, 0x8060}, 0x40040) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/209) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) connect$can_j1939(r1, &(0x7f00000003c0)={0x1d, r2, 0x2, {0x0, 0x0, 0x2}, 0x1}, 0x18) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) 21:00:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000) 21:00:34 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:34 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:34 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x22, 0x800, 0x2) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf25030000000c00060002000000000000000400078008000100000000000c000500a2000000000000000c0003000300000000004d0000000300cb07000000004000"], 0x50}, 0x1, 0x0, 0x0, 0x8060}, 0x40040) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/209) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) connect$can_j1939(r1, &(0x7f00000003c0)={0x1d, r2, 0x2, {0x0, 0x0, 0x2}, 0x1}, 0x18) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) 21:00:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) 21:00:34 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:34 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000640)={0x12, 0x10, 0xfa00, {&(0x7f0000000580), r2, r3}}, 0x18) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {&(0x7f00000003c0)}}, 0x10) 21:00:34 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, 0x0, 0x0) 21:00:34 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, 0x0, 0x0) 21:00:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x22, 0x800, 0x2) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf25030000000c00060002000000000000000400078008000100000000000c000500a2000000000000000c0003000300000000004d0000000300cb07000000004000"], 0x50}, 0x1, 0x0, 0x0, 0x8060}, 0x40040) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/209) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) connect$can_j1939(r1, &(0x7f00000003c0)={0x1d, r2, 0x2, {0x0, 0x0, 0x2}, 0x1}, 0x18) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) 21:00:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) 21:00:34 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000640)={0x12, 0x10, 0xfa00, {&(0x7f0000000580), r2, r3}}, 0x18) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {&(0x7f00000003c0)}}, 0x10) 21:00:34 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, 0x0, 0x0) 21:00:34 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, 0x0, 0x0) 21:00:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x22, 0x800, 0x2) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf25030000000c00060002000000000000000400078008000100000000000c000500a2000000000000000c0003000300000000004d0000000300cb07000000004000"], 0x50}, 0x1, 0x0, 0x0, 0x8060}, 0x40040) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/209) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) connect$can_j1939(r1, &(0x7f00000003c0)={0x1d, r2, 0x2, {0x0, 0x0, 0x2}, 0x1}, 0x18) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) 21:00:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) 21:00:34 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000640)={0x12, 0x10, 0xfa00, {&(0x7f0000000580), r2, r3}}, 0x18) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {&(0x7f00000003c0)}}, 0x10) 21:00:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, 0x0, 0x0) 21:00:35 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380), 0x4) 21:00:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, 0x0, 0x0) 21:00:35 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x22, 0x800, 0x2) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf25030000000c00060002000000000000000400078008000100000000000c000500a2000000000000000c0003000300000000004d0000000300cb07000000004000"], 0x50}, 0x1, 0x0, 0x0, 0x8060}, 0x40040) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/209) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) connect$can_j1939(r0, &(0x7f00000003c0)={0x1d, r1, 0x2, {0x0, 0x0, 0x2}, 0x1}, 0x18) 21:00:35 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000640)={0x12, 0x10, 0xfa00, {&(0x7f0000000580), r2, r3}}, 0x18) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 21:00:35 executing program 3: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000640)={0x12, 0x10, 0xfa00, {&(0x7f0000000580), r2, r3}}, 0x18) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {&(0x7f00000003c0)}}, 0x10) 21:00:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, 0x0, 0x0) 21:00:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:35 executing program 4: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000640)={0x12, 0x10, 0xfa00, {&(0x7f0000000580), r2, r3}}, 0x18) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {&(0x7f00000003c0)}}, 0x10) 21:00:35 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x22, 0x800, 0x2) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf25030000000c00060002000000000000000400078008000100000000000c000500a2000000000000000c0003000300000000004d0000000300cb07000000004000"], 0x50}, 0x1, 0x0, 0x0, 0x8060}, 0x40040) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/209) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in6=@private0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) 21:00:35 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000640)={0x12, 0x10, 0xfa00, {&(0x7f0000000580), r2, r3}}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') 21:00:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0xb11, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:35 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, 0x0, 0x0) 21:00:35 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = accept4$ax25(r0, &(0x7f0000000240)={{0x3, @null}, [@default, @default, @null, @default, @netrom, @remote, @rose, @null]}, &(0x7f00000002c0)=0x48, 0x800) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) recvfrom$ax25(r0, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) accept4$ax25(r1, &(0x7f0000000300)={{0x3, @rose}, [@rose, @null, @remote, @null, @remote, @null, @null, @default]}, &(0x7f0000000380)=0x48, 0x800) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:00:35 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x22, 0x800, 0x2) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf25030000000c00060002000000000000000400078008000100000000000c000500a2000000000000000c0003000300000000004d0000000300cb07000000004000"], 0x50}, 0x1, 0x0, 0x0, 0x8060}, 0x40040) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000180)=""/209) 21:00:35 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000640)={0x12, 0x10, 0xfa00, {&(0x7f0000000580), r2, r3}}, 0x18) 21:00:35 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = accept4$ax25(r0, &(0x7f0000000240)={{0x3, @null}, [@default, @default, @null, @default, @netrom, @remote, @rose, @null]}, &(0x7f00000002c0)=0x48, 0x800) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) recvfrom$ax25(r0, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) accept4$ax25(r1, &(0x7f0000000300)={{0x3, @rose}, [@rose, @null, @remote, @null, @remote, @null, @null, @default]}, &(0x7f0000000380)=0x48, 0x800) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:00:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) 21:00:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x14, 0x0, 0x0) 21:00:35 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x22, 0x800, 0x2) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf25030000000c00060002000000000000000400078008000100000000000c000500a2000000000000000c0003000300000000004d0000000300cb07000000004000"], 0x50}, 0x1, 0x0, 0x0, 0x8060}, 0x40040) 21:00:35 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80001, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r4, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r6, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)=ANY=[@ANYBLOB="e8010000", @ANYRES16=0x0, @ANYBLOB="04002abd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000010000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400050b000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000008000100", @ANYRES32=r5, @ANYBLOB="c800028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r9, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r9}, 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1a8, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x18c, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x9, 0x8, 0x8, 0x7}, {0x8, 0x9, 0x6, 0xa7f}, {0x5, 0xff, 0x3, 0x10001}, {0x2, 0x7, 0x9, 0xffffffff}, {0x1, 0x8, 0x0, 0x4}, {0x1, 0x7, 0x8, 0x7fff}, {0x4, 0x80, 0x2, 0x6}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xf5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4014}, 0x20000800) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)) 21:00:35 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0), 0x106, 0x3}}, 0x20) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) 21:00:36 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x2, [@default, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x400000, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x585542, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r7, r6}}, 0x18) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r7, r4}}, 0x18) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r3, r4}}, 0x18) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x440100, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x189200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r9, 0x2}}, 0x10) 21:00:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:36 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = accept4$ax25(r0, &(0x7f0000000240)={{0x3, @null}, [@default, @default, @null, @default, @netrom, @remote, @rose, @null]}, &(0x7f00000002c0)=0x48, 0x800) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) recvfrom$ax25(r0, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) accept4$ax25(r1, &(0x7f0000000300)={{0x3, @rose}, [@rose, @null, @remote, @null, @remote, @null, @null, @default]}, &(0x7f0000000380)=0x48, 0x800) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 21:00:36 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) socket(0x22, 0x800, 0x2) 21:00:36 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0), 0x106, 0x3}}, 0x20) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 21:00:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x6, 0x0, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x3, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 21:00:36 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000080)) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:36 executing program 1: socket(0x22, 0x800, 0x2) 21:00:36 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = accept4$ax25(r0, &(0x7f0000000240)={{0x3, @null}, [@default, @default, @null, @default, @netrom, @remote, @rose, @null]}, &(0x7f00000002c0)=0x48, 0x800) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) recvfrom$ax25(r0, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) accept4$ax25(r1, &(0x7f0000000300)={{0x3, @rose}, [@rose, @null, @remote, @null, @remote, @null, @null, @default]}, &(0x7f0000000380)=0x48, 0x800) 21:00:36 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000080)) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0xb11, 0x0, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:36 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0), 0x106, 0x3}}, 0x20) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:36 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000080)) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:36 executing program 1: socket(0x0, 0x800, 0x2) 21:00:36 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) accept4$ax25(r0, &(0x7f0000000240)={{0x3, @null}, [@default, @default, @null, @default, @netrom, @remote, @rose, @null]}, &(0x7f00000002c0)=0x48, 0x800) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) recvfrom$ax25(r0, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:36 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}, 0x0, 0x0, 0x4000}) 21:00:36 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:36 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000080)) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0xb11, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}}, 0x40000) 21:00:36 executing program 1: socket(0x0, 0x800, 0x2) 21:00:36 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) accept4$ax25(r0, &(0x7f0000000240)={{0x3, @null}, [@default, @default, @null, @default, @netrom, @remote, @rose, @null]}, &(0x7f00000002c0)=0x48, 0x800) recvfrom$ax25(r0, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:36 executing program 0: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0), 0x106, 0x3}}, 0x20) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:36 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0xb11, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x34}}, 0x40000) 21:00:37 executing program 3: syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080)) 21:00:37 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:37 executing program 1: socket(0x0, 0x800, 0x2) 21:00:37 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x3, {0xa, 0x4e24, 0x1ff, @loopback, 0x6}}}, 0x38) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r4, 0x7}}, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f0000000180)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x44}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r6, r1}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r6, 0xb}}, 0x10) 21:00:37 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0xb11, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x2c}}, 0x40000) 21:00:37 executing program 3: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)) 21:00:37 executing program 4: recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:37 executing program 1: socket(0x22, 0x0, 0x2) 21:00:37 executing program 0: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:37 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0xb11, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x24}}, 0x40000) 21:00:37 executing program 3: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)) 21:00:37 executing program 4: recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:37 executing program 1: socket(0x22, 0x0, 0x0) 21:00:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0xb11, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x2c}}, 0x40000) 21:00:37 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0xb11, 0x0, 0x0, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x87}]}, 0x1c}}, 0x40000) 21:00:37 executing program 3: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)) 21:00:37 executing program 1: socket(0x22, 0x0, 0x0) 21:00:37 executing program 4: recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:37 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}, 0x0, 0x700}) 21:00:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0xb11}, 0x14}}, 0x40000) 21:00:37 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:37 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080)) 21:00:37 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) recvfrom$ax25(r0, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:37 executing program 1: socket(0x22, 0x0, 0x0) 21:00:38 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) sendto$ax25(0xffffffffffffffff, &(0x7f0000000380)="21905495c187ce2a7f98f8849a9b0ee3969157c34e9d95ea83041a617075e8db93f7a24c50b8b000c4cd25126fe0", 0x2e, 0x10, &(0x7f00000003c0)={{0x3, @null, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast]}, 0x48) 21:00:38 executing program 5: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0xb11}, 0x14}}, 0x0) 21:00:38 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x1) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080)) 21:00:38 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) recvfrom$ax25(r0, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x24, 0x0, &(0x7f0000000400)=0x4) 21:00:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x6, 0x0, 0x8400) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xd1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x90000}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x60000000) 21:00:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x21, 0x0, &(0x7f0000000400)=0x4) 21:00:38 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:38 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x1) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080)) 21:00:38 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) recvfrom$ax25(r0, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x24, 0x0, &(0x7f0000000400)=0x4) 21:00:38 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x1) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080)) 21:00:38 executing program 4: syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x21, 0x0, &(0x7f0000000400)=0x4) 21:00:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x24, 0x0, &(0x7f0000000400)=0x4) 21:00:38 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x1) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080)) 21:00:38 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1e, 0x0, &(0x7f0000000400)=0x4) 21:00:38 executing program 4: syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x21, 0x0, &(0x7f0000000400)=0x4) 21:00:38 executing program 1: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x24, 0x0, &(0x7f0000000400)=0x4) 21:00:38 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:38 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080)) 21:00:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1e, 0x0, &(0x7f0000000400)=0x4) 21:00:39 executing program 4: syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/246, 0xf6, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:39 executing program 1: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x24, 0x0, &(0x7f0000000400)=0x4) 21:00:39 executing program 2: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000400)=0x4) 21:00:39 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1e, 0x0, &(0x7f0000000400)=0x4) 21:00:39 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)) 21:00:39 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x2140, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:39 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:39 executing program 1: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x24, 0x0, &(0x7f0000000400)=0x4) 21:00:39 executing program 2: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000400)=0x4) 21:00:39 executing program 0: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000000400)=0x4) 21:00:39 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)) 21:00:39 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:39 executing program 2: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000400)=0x4) 21:00:39 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x24, 0x0, &(0x7f0000000400)=0x4) 21:00:39 executing program 0: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000000400)=0x4) 21:00:39 executing program 3: syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)) 21:00:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x21, 0x0, &(0x7f0000000400)=0x4) 21:00:39 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:39 executing program 0: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000000400)=0x4) 21:00:39 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, 0x0) 21:00:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x24, 0x0, &(0x7f0000000400)=0x4) 21:00:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1e, 0x0, &(0x7f0000000400)=0x4) 21:00:40 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:40 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x21, 0x0, &(0x7f0000000400)=0x4) 21:00:40 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, 0x0) 21:00:40 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 21:00:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1e, 0x0, &(0x7f0000000400)=0x4) 21:00:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x24, 0x0, &(0x7f0000000400)=0x4) 21:00:40 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, 0x0) 21:00:40 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 21:00:40 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x24, 0x0, &(0x7f0000000400)=0x4) 21:00:40 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x21, 0x0, &(0x7f0000000400)=0x4) 21:00:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1e, 0x0, &(0x7f0000000400)=0x4) 21:00:40 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 21:00:41 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:41 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 21:00:41 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x24, 0x0, &(0x7f0000000400)=0x4) 21:00:41 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 21:00:41 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000400)=0x4) 21:00:41 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000000400)=0x4) 21:00:41 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 21:00:41 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x24, 0x0, &(0x7f0000000400)=0x4) 21:00:41 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000000400)=0x4) 21:00:41 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 21:00:41 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000400)=0x4) 21:00:41 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000000400)=0x4) 21:00:42 executing program 3: ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 21:00:42 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:00:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1e, 0x0, 0x0) 21:00:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x24, 0x0, 0x0) 21:00:42 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000400)=0x4) 21:00:42 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x2140, 0x0, 0x0) 21:00:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1e, 0x0, 0x0) 21:00:42 executing program 3: ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 21:00:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x24, 0x0, 0x0) 21:00:42 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x21, 0x0, 0x0) 21:00:42 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 21:00:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1e, 0x0, 0x0) 21:00:42 executing program 3: ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 21:00:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x21, 0x0, 0x0) 21:00:43 executing program 5: syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)) 21:00:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x24, 0x0, 0x0) 21:00:43 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, 0x0) 21:00:43 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, 0x0) 21:00:43 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 21:00:43 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 21:00:43 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x20000048) 21:00:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r2, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x19c, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x86fe}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x400}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x9742}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x1e21}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x17}, {0x8, 0xb, 0x1c01}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0xe567}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x7}, {0x6, 0x11, 0x1f}, {0x8, 0xb, 0x6}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008040) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r5, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r7, 0x1, {0x2, 0xf1}, 0xfd}, 0x18) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x6, 0x0, 0x8400) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r9, r8}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000600)={0x16, 0x98, 0xfa00, {&(0x7f00000005c0), 0x3, r9, 0x1c, 0x1, @in={0x2, 0x4e23, @loopback}}}, 0xa0) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vcs\x00', 0x0, 0x0) 21:00:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x21, 0x0, 0x0) 21:00:43 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, 0x0) 21:00:43 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:00:43 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 21:00:43 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x20000048) 21:00:43 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:00:43 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, 0x0) 21:00:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:00:43 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:00:43 executing program 3: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 21:00:43 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x7}, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:43 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x20000048) 21:00:43 executing program 4: ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, 0x0) 21:00:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:00:43 executing program 3: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 21:00:43 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:00:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:00:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:00:43 executing program 1: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x20000048) 21:00:44 executing program 4: ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, 0x0) 21:00:44 executing program 3: syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 21:00:44 executing program 5: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:00:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:00:44 executing program 4: ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, 0x0) 21:00:44 executing program 0: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:00:44 executing program 1: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x20000048) 21:00:44 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7000000}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:44 executing program 5: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:00:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:00:44 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, 0x0) 21:00:44 executing program 1: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x20000048) 21:00:44 executing program 0: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:00:44 executing program 5: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:00:44 executing program 2: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:00:44 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0xf, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) 21:00:44 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, 0x0) 21:00:44 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x20000048) 21:00:44 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:00:44 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0xf, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) 21:00:44 executing program 0: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:00:44 executing program 2: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:00:44 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x20000048) 21:00:44 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, 0x0) 21:00:44 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:00:44 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0xf, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) 21:00:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:00:44 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x20000048) 21:00:44 executing program 2: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:00:44 executing program 4: syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, 0x0) 21:00:45 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:00:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:00:45 executing program 3: shmctl$IPC_SET(0x0, 0xf, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) 21:00:45 executing program 1: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x20000048) 21:00:45 executing program 4: syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, 0x0) 21:00:45 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:00:45 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:00:45 executing program 3: shmctl$IPC_SET(0x0, 0xf, 0x0) 21:00:45 executing program 4: syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, 0x0) 21:00:45 executing program 1: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x20000048) 21:00:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:00:45 executing program 3: shmctl$IPC_SET(0x0, 0xf, 0x0) 21:00:45 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:00:45 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x101081) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0x31, 0x2}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x15c, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8, 0x7, 0x84a}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0xfffa, 0x7, 0x2, 0x92}, {0x401, 0xff, 0x29, 0x2}, {0x1, 0x3, 0x81, 0x6}, {0x6, 0x0, 0x72, 0x3}]}}}]}}]}, 0x15c}}, 0x20001830) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x6, 0x0, 0x8400) 21:00:45 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:00:45 executing program 3: shmctl$IPC_SET(0x0, 0xf, 0x0) 21:00:45 executing program 1: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x20000048) 21:00:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xd, 0x0, &(0x7f0000000400)=0x4) 21:00:45 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:00:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:00:45 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:00:45 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) [ 1469.208314][T26434] sctp: [Deprecated]: syz-executor.4 (pid 26434) Use of int in maxseg socket option. [ 1469.208314][T26434] Use struct sctp_assoc_value instead 21:00:46 executing program 3: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:00:46 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:00:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xd, 0x0, &(0x7f0000000400)=0x4) 21:00:46 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:00:46 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:00:46 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x6, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) 21:00:46 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) [ 1469.510202][T26450] sctp: [Deprecated]: syz-executor.4 (pid 26450) Use of int in maxseg socket option. [ 1469.510202][T26450] Use struct sctp_assoc_value instead 21:00:46 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:00:46 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:00:46 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:00:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xd, 0x0, &(0x7f0000000400)=0x4) 21:00:46 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x6, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) 21:00:46 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:00:46 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) [ 1469.777539][T26465] sctp: [Deprecated]: syz-executor.4 (pid 26465) Use of int in maxseg socket option. [ 1469.777539][T26465] Use struct sctp_assoc_value instead 21:00:46 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:46 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x6, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) 21:00:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, 0x0) 21:00:46 executing program 5: sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="e8010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f0000000340)=0xe8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r2, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="6320b8ca4f2a0b88"], 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r8, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20001040}, 0xc, &(0x7f0000002640)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x42001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x6, 0x0, 0x8400) 21:00:46 executing program 4: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000400)=0x4) 21:00:46 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:00:46 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, 0x0) 21:00:46 executing program 3: shmctl$IPC_SET(0x0, 0x6, &(0x7f0000000000)={{0x3, 0x0, 0xffffffffffffffff, 0xee01}}) 21:00:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7, 0x0, &(0x7f0000000400)=0x4) 21:00:46 executing program 4: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000400)=0x4) 21:00:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, 0x0) 21:00:47 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, 0x0) 21:00:47 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) 21:00:47 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7, 0x0, &(0x7f0000000400)=0x4) 21:00:47 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:47 executing program 4: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000400)=0x4) 21:00:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, 0x0) 21:00:47 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:00:47 executing program 3 (fault-call:0 fault-nth:0): shmctl$IPC_SET(0x0, 0x6, 0x0) 21:00:47 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7, 0x0, &(0x7f0000000400)=0x4) 21:00:47 executing program 1: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xd, 0x0, &(0x7f0000000400)=0x4) 21:00:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, 0x0) [ 1470.709858][T26519] FAULT_INJECTION: forcing a failure. [ 1470.709858][T26519] name fail_usercopy, interval 1, probability 0, space 0, times 0 21:00:47 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:00:47 executing program 1: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) [ 1470.792507][T26519] CPU: 1 PID: 26519 Comm: syz-executor.3 Not tainted 5.11.0-rc4-syzkaller #0 [ 1470.803356][T26519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.815346][T26519] Call Trace: [ 1470.818693][T26519] dump_stack+0x183/0x22e [ 1470.823344][T26519] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1470.829507][T26519] ? show_regs_print_info+0x12/0x12 [ 1470.835112][T26519] ? __lock_acquire+0x5e40/0x5e40 21:00:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xd, 0x0, &(0x7f0000000400)=0x4) [ 1470.840547][T26519] ? snprintf+0xc0/0x110 [ 1470.845399][T26519] should_fail+0x384/0x4b0 [ 1470.851475][T26519] _copy_to_user+0x2d/0x130 [ 1470.856602][T26519] simple_read_from_buffer+0xd9/0x160 [ 1470.862135][T26519] proc_fail_nth_read+0x195/0x210 [ 1470.868331][T26519] ? proc_fault_inject_write+0x370/0x370 [ 1470.874260][T26519] ? rw_verify_area+0x1b8/0x370 [ 1470.880112][T26519] ? fsnotify_perm+0x2fd/0x4d0 [ 1470.885932][T26519] ? proc_fault_inject_write+0x370/0x370 21:00:47 executing program 5: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000400)=0x4) [ 1470.892204][T26519] vfs_read+0x294/0xc20 [ 1470.896515][T26519] ? mutex_lock_io_nested+0x60/0x60 [ 1470.902178][T26519] ? kernel_read+0x70/0x70 [ 1470.907370][T26519] ? __fget_files+0x34f/0x380 [ 1470.912380][T26519] ? mutex_lock_nested+0x1a/0x20 [ 1470.917636][T26519] ? __fdget_pos+0x24e/0x2f0 [ 1470.922582][T26519] ? ksys_read+0x72/0x2a0 [ 1470.927743][T26519] ksys_read+0x171/0x2a0 [ 1470.932608][T26519] ? vfs_write+0xc90/0xc90 [ 1470.937256][T26519] ? syscall_enter_from_user_mode+0x24/0x190 [ 1470.943672][T26519] ? syscall_enter_from_user_mode+0x24/0x190 [ 1470.950618][T26519] do_syscall_64+0x2d/0x70 [ 1470.955822][T26519] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1470.962763][T26519] RIP: 0033:0x417b11 [ 1470.967064][T26519] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1470.996209][T26519] RSP: 002b:00007faea5c1dc70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 1471.005312][T26519] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417b11 [ 1471.014293][T26519] RDX: 000000000000000f RSI: 00007faea5c1dcb0 RDI: 0000000000000003 [ 1471.025142][T26519] RBP: 00007faea5c1dca0 R08: 0000000000000000 R09: 0000000000000000 21:00:47 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) [ 1471.035390][T26519] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1471.044869][T26519] R13: 00007ffdd59936df R14: 00007faea5c1e9c0 R15: 000000000119bf8c 21:00:47 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) [ 1471.232325][T26542] FAULT_INJECTION: forcing a failure. [ 1471.232325][T26542] name fail_usercopy, interval 1, probability 0, space 0, times 0 21:00:48 executing program 1: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:48 executing program 5: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000400)=0x4) [ 1471.348651][T26546] FAULT_INJECTION: forcing a failure. [ 1471.348651][T26546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1471.392499][T26546] CPU: 0 PID: 26546 Comm: syz-executor.2 Not tainted 5.11.0-rc4-syzkaller #0 [ 1471.416018][T26546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1471.432097][T26546] Call Trace: [ 1471.435775][T26546] dump_stack+0x183/0x22e [ 1471.440526][T26546] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1471.446467][T26546] ? show_regs_print_info+0x12/0x12 [ 1471.452460][T26546] ? __lock_acquire+0x5e40/0x5e40 [ 1471.458380][T26546] should_fail+0x384/0x4b0 [ 1471.463210][T26546] _copy_to_user+0x2d/0x130 [ 1471.468825][T26546] sctp_getsockopt+0xaa2e/0xe490 [ 1471.474174][T26546] ? __bfs+0x6c0/0x6c0 [ 1471.478739][T26546] ? sctp_setsockopt+0xf320/0xf320 [ 1471.484477][T26546] ? __lock_acquire+0x137e/0x5e40 [ 1471.490505][T26546] ? trace_lock_acquire+0x180/0x180 [ 1471.498462][T26546] ? __lock_acquire+0x137e/0x5e40 [ 1471.505585][T26546] ? __bpf_trace_rcu_utilization+0x10/0x10 [ 1471.512583][T26546] ? trace_lock_acquire+0x180/0x180 [ 1471.524386][T26546] ? rcu_read_lock_sched_held+0x87/0x110 [ 1471.533103][T26546] ? __bpf_trace_rcu_utilization+0x10/0x10 [ 1471.542096][T26546] ? rcu_read_lock_sched_held+0x87/0x110 [ 1471.549326][T26546] ? __bpf_trace_rcu_utilization+0x10/0x10 [ 1471.556888][T26546] ? rcu_read_lock_sched_held+0x87/0x110 [ 1471.563368][T26546] ? __bpf_trace_rcu_utilization+0x10/0x10 [ 1471.570153][T26546] ? rcu_lock_release+0x9/0x20 [ 1471.575897][T26546] ? __lock_acquire+0x5e40/0x5e40 [ 1471.581717][T26546] ? __fget_files+0x34f/0x380 [ 1471.587697][T26546] ? sock_common_getsockopt+0x2a/0xb0 [ 1471.594622][T26546] ? sock_recv_errqueue+0x4a0/0x4a0 [ 1471.601753][T26546] __sys_getsockopt+0x29b/0x4c0 [ 1471.608231][T26546] __x64_sys_getsockopt+0xb1/0xc0 [ 1471.613855][T26546] do_syscall_64+0x2d/0x70 [ 1471.619528][T26546] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1471.627146][T26546] RIP: 0033:0x45e219 [ 1471.631805][T26546] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1471.653580][T26546] RSP: 002b:00007f72196fac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1471.663129][T26546] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1471.672891][T26546] RDX: 0000000000000012 RSI: 0000000000000084 RDI: 0000000000000003 [ 1471.685297][T26546] RBP: 00007f72196faca0 R08: 0000000020000400 R09: 0000000000000000 [ 1471.695290][T26546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1471.705078][T26546] R13: 00007ffce742029f R14: 00007f72196fb9c0 R15: 000000000119bf8c 21:00:48 executing program 3: shmctl$IPC_SET(0x0, 0x2, 0x0) [ 1471.789196][T26542] CPU: 0 PID: 26542 Comm: syz-executor.0 Not tainted 5.11.0-rc4-syzkaller #0 [ 1471.803434][T26542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1471.818909][T26542] Call Trace: [ 1471.825068][T26542] dump_stack+0x183/0x22e [ 1471.830284][T26542] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1471.836986][T26542] ? show_regs_print_info+0x12/0x12 [ 1471.843612][T26542] ? __lock_acquire+0x5e40/0x5e40 [ 1471.852848][T26542] should_fail+0x384/0x4b0 [ 1471.860035][T26542] _copy_to_user+0x2d/0x130 [ 1471.865397][T26542] sctp_getsockopt+0xaa2e/0xe490 [ 1471.872498][T26542] ? __bfs+0x6c0/0x6c0 [ 1471.879784][T26542] ? sctp_setsockopt+0xf320/0xf320 [ 1471.888245][T26542] ? __lock_acquire+0x137e/0x5e40 [ 1471.895278][T26542] ? trace_lock_acquire+0x180/0x180 [ 1471.902686][T26542] ? __lock_acquire+0x137e/0x5e40 [ 1471.909969][T26542] ? __bpf_trace_rcu_utilization+0x10/0x10 [ 1471.916974][T26542] ? trace_lock_acquire+0x180/0x180 [ 1471.923261][T26542] ? rcu_read_lock_sched_held+0x87/0x110 [ 1471.929457][T26542] ? __bpf_trace_rcu_utilization+0x10/0x10 [ 1471.940184][T26542] ? rcu_read_lock_sched_held+0x87/0x110 [ 1471.946854][T26542] ? __bpf_trace_rcu_utilization+0x10/0x10 [ 1471.953574][T26542] ? rcu_read_lock_sched_held+0x87/0x110 [ 1471.960234][T26542] ? __bpf_trace_rcu_utilization+0x10/0x10 [ 1471.967430][T26542] ? rcu_lock_release+0x9/0x20 [ 1471.976139][T26542] ? __lock_acquire+0x5e40/0x5e40 [ 1471.989550][T26542] ? __fget_files+0x34f/0x380 [ 1472.000438][T26542] ? sock_common_getsockopt+0x2a/0xb0 [ 1472.009361][T26542] ? sock_recv_errqueue+0x4a0/0x4a0 [ 1472.022371][T26542] __sys_getsockopt+0x29b/0x4c0 [ 1472.031658][T26542] __x64_sys_getsockopt+0xb1/0xc0 [ 1472.039348][T26542] do_syscall_64+0x2d/0x70 [ 1472.044654][T26542] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1472.051231][T26542] RIP: 0033:0x45e219 [ 1472.064036][T26542] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1472.106179][T26542] RSP: 002b:00007f3ae5f33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1472.150357][T26542] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1472.159987][T26542] RDX: 0000000000000013 RSI: 0000000000000084 RDI: 0000000000000003 [ 1472.171872][T26542] RBP: 00007f3ae5f33ca0 R08: 0000000020000400 R09: 0000000000000000 [ 1472.183367][T26542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 21:00:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xd, 0x0, &(0x7f0000000400)=0x4) [ 1472.192181][T26542] R13: 00007ffdd082e62f R14: 00007f3ae5f349c0 R15: 000000000119bf8c 21:00:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:00:49 executing program 3: shmctl$IPC_SET(0x0, 0x3, 0x0) 21:00:49 executing program 5: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000400)=0x4) 21:00:49 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000400)=0x4) 21:00:49 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000400)=0x4) 21:00:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:00:49 executing program 3: shmctl$IPC_SET(0x0, 0xb, 0x0) 21:00:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7, 0x0, &(0x7f0000000400)=0x4) 21:00:49 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) 21:00:49 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000400)=0x4) 21:00:49 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:49 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000400)=0x4) 21:00:49 executing program 3: shmctl$IPC_SET(0x0, 0xc, 0x0) 21:00:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x4, 0x0, &(0x7f0000000400)=0x4) 21:00:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000400)=0x4) 21:00:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7, 0x0, &(0x7f0000000400)=0x4) 21:00:50 executing program 3: shmctl$IPC_SET(0x0, 0xd, 0x0) 21:00:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x6, 0x0, &(0x7f0000000400)=0x4) 21:00:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xd, 0x0, 0x0) 21:00:50 executing program 1: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, 0x0, &(0x7f0000000400)=0x4) 21:00:50 executing program 3: shmctl$IPC_SET(0x0, 0xe, 0x0) 21:00:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7, 0x0, &(0x7f0000000400)=0x4) 21:00:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7, 0x0, &(0x7f0000000400)=0x4) 21:00:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xd, 0x0, 0x0) 21:00:50 executing program 1: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:50 executing program 3: shmctl$IPC_SET(0x0, 0xf, 0x0) 21:00:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x4, 0x0, &(0x7f0000000400)=0x4) 21:00:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x8, 0x0, &(0x7f0000000400)=0x4) 21:00:50 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000400)=0x4) 21:00:50 executing program 3: ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, 0x20}) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:00:50 executing program 1: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xd, 0x0, 0x0) 21:00:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x6, 0x0, &(0x7f0000000400)=0x4) 21:00:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x9, 0x0, &(0x7f0000000400)=0x4) 21:00:50 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:00:50 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000400)=0x4) 21:00:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7, 0x0, &(0x7f0000000400)=0x4) 21:00:50 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/152) r0 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/117) 21:00:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x8, 0x0, &(0x7f0000000400)=0x4) 21:00:51 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:00:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xa, 0x0, &(0x7f0000000400)=0x4) 21:00:51 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000400)=0x4) 21:00:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x8, 0x0, &(0x7f0000000400)=0x4) 21:00:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x8, 0x0, &(0x7f0000000400)=0x4) 21:00:51 executing program 3: shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x1000, 0x54000048, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) r2 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/202) 21:00:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xb, 0x0, &(0x7f0000000400)=0x4) 21:00:51 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:00:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7, 0x0, 0x0) 21:00:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x8, 0x0, &(0x7f0000000400)=0x4) 21:00:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x9, 0x0, &(0x7f0000000400)=0x4) 21:00:51 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_SET(r1, 0x6, 0x0) 21:00:51 executing program 1: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xc, 0x0, &(0x7f0000000400)=0x4) 21:00:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7, 0x0, 0x0) 21:00:51 executing program 4: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000400)=0x4) 21:00:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xa, 0x0, &(0x7f0000000400)=0x4) 21:00:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:00:51 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xd, 0x0, &(0x7f0000000400)=0x4) 21:00:51 executing program 4: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000400)=0x4) 21:00:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7, 0x0, 0x0) 21:00:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xb, 0x0, &(0x7f0000000400)=0x4) [ 1475.085954][T26707] sctp: [Deprecated]: syz-executor.0 (pid 26707) Use of int in maxseg socket option. [ 1475.085954][T26707] Use struct sctp_assoc_value instead [ 1475.130069][T26709] FAULT_INJECTION: forcing a failure. [ 1475.130069][T26709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1475.172667][T26709] CPU: 0 PID: 26709 Comm: syz-executor.1 Not tainted 5.11.0-rc4-syzkaller #0 [ 1475.181574][T26709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1475.191933][T26709] Call Trace: [ 1475.195243][T26709] dump_stack+0x183/0x22e [ 1475.199867][T26709] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1475.205721][T26709] ? show_regs_print_info+0x12/0x12 [ 1475.210961][T26709] ? __lock_acquire+0x5e40/0x5e40 [ 1475.216629][T26709] should_fail+0x384/0x4b0 [ 1475.221193][T26709] _copy_from_user+0x2d/0x170 [ 1475.225904][T26709] __sys_bind+0x1e0/0x3f0 [ 1475.230355][T26709] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1475.235856][T26709] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 1475.241985][T26709] ? print_irqtrace_events+0x220/0x220 [ 1475.247500][T26709] ? print_irqtrace_events+0x220/0x220 [ 1475.253031][T26709] ? syscall_enter_from_user_mode+0x24/0x190 [ 1475.259163][T26709] ? lockdep_hardirqs_on+0x8d/0x130 [ 1475.266951][T26709] __x64_sys_bind+0x76/0x80 [ 1475.273129][T26709] do_syscall_64+0x2d/0x70 [ 1475.277601][T26709] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1475.283597][T26709] RIP: 0033:0x45e219 [ 1475.287531][T26709] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1475.307439][T26709] RSP: 002b:00007fb199084c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 21:00:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xe, 0x0, &(0x7f0000000400)=0x4) 21:00:51 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x6000) 21:00:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) shmctl$IPC_SET(0x0, 0x6, 0x0) [ 1475.316074][T26709] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1475.324094][T26709] RDX: 0000000000000048 RSI: 0000000020000000 RDI: 0000000000000004 [ 1475.332193][T26709] RBP: 00007fb199084ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1475.340206][T26709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1475.348223][T26709] R13: 00007ffd27f3c95f R14: 00007fb1990859c0 R15: 000000000119bf8c 21:00:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xc, 0x0, &(0x7f0000000400)=0x4) 21:00:52 executing program 4: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000400)=0x4) 21:00:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xf, 0x0, &(0x7f0000000400)=0x4) 21:00:52 executing program 3: shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) shmget$private(0x0, 0xa000, 0x10, &(0x7f0000ff6000/0xa000)=nil) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001040)={{{@in6=@remote, @in=@initdev}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000001140)=0xe8) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff6000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r3, 0x0) r4 = shmget$private(0x0, 0x11000, 0x20, &(0x7f0000fef000/0x11000)=nil) shmctl$IPC_SET(r4, 0x6, 0x0) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000001000)=""/49) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000000)=""/4096) 21:00:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x8, 0x0, &(0x7f0000000400)=0x4) 21:00:52 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xd, 0x0, &(0x7f0000000400)=0x4) 21:00:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x10, 0x0, &(0x7f0000000400)=0x4) 21:00:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xc, 0x0, &(0x7f0000000400)=0x4) [ 1475.840022][T26744] sctp: [Deprecated]: syz-executor.2 (pid 26744) Use of int in maxseg socket option. [ 1475.840022][T26744] Use struct sctp_assoc_value instead 21:00:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xc, 0x0, &(0x7f0000000400)=0x4) 21:00:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x11, 0x0, &(0x7f0000000400)=0x4) 21:00:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x8, 0x0, &(0x7f0000000400)=0x4) 21:00:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xe, 0x0, &(0x7f0000000400)=0x4) [ 1475.982497][T26748] FAULT_INJECTION: forcing a failure. [ 1475.982497][T26748] name fail_usercopy, interval 1, probability 0, space 0, times 0 21:00:52 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r2, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r6, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r8, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000033c0)={{{@in=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f00000034c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000003780)={'syztnl0\x00', &(0x7f0000003700)={'syztnl2\x00', r0, 0x2f, 0x9, 0x9, 0x1, 0x21, @ipv4={[], [], @broadcast}, @dev={0xfe, 0x80, [], 0x38}, 0x20, 0x8, 0x0, 0x4}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000004200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000041c0)={&(0x7f00000037c0)={0x9f0, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r0}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8, 0x1, r0}, {0x254, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xe32a}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xc383}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x61e2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xf6}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xbd}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x0, 0x2, 0xdb, 0x2}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x100, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x0, 0x6, 0x20, 0x9}, {0x0, 0x6, 0x7, 0xfffffffe}, {0x35, 0xc8, 0x6, 0x100}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r3}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r12}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0xfecd, 0x4, 0xfffff001}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x9f0}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x2, 0xee01, 0xffffffffffffffff, r1, 0xee00, 0x2, 0x80}, 0x800, 0x4000000000000000, 0x2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffff}) [ 1476.044629][T26748] CPU: 0 PID: 26748 Comm: syz-executor.1 Not tainted 5.11.0-rc4-syzkaller #0 [ 1476.053479][T26748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1476.063577][T26748] Call Trace: [ 1476.067021][T26748] dump_stack+0x183/0x22e [ 1476.071382][T26748] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1476.077139][T26748] ? show_regs_print_info+0x12/0x12 [ 1476.082395][T26748] ? __lock_acquire+0x5e40/0x5e40 [ 1476.087451][T26748] ? snprintf+0xc0/0x110 [ 1476.091733][T26748] should_fail+0x384/0x4b0 [ 1476.096192][T26748] _copy_to_user+0x2d/0x130 [ 1476.100739][T26748] simple_read_from_buffer+0xd9/0x160 [ 1476.106162][T26748] proc_fail_nth_read+0x195/0x210 [ 1476.111262][T26748] ? proc_fault_inject_write+0x370/0x370 [ 1476.116963][T26748] ? rw_verify_area+0x1b8/0x370 [ 1476.121864][T26748] ? fsnotify_perm+0x2fd/0x4d0 [ 1476.126651][T26748] ? proc_fault_inject_write+0x370/0x370 [ 1476.132329][T26748] vfs_read+0x294/0xc20 [ 1476.136562][T26748] ? mutex_lock_io_nested+0x60/0x60 21:00:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xc, 0x0, &(0x7f0000000400)=0x4) [ 1476.141812][T26748] ? kernel_read+0x70/0x70 [ 1476.146295][T26748] ? __fget_files+0x34f/0x380 [ 1476.151013][T26748] ? mutex_lock_nested+0x1a/0x20 [ 1476.156026][T26748] ? __fdget_pos+0x24e/0x2f0 [ 1476.160665][T26748] ? ksys_read+0x72/0x2a0 [ 1476.165048][T26748] ksys_read+0x171/0x2a0 [ 1476.169336][T26748] ? vfs_write+0xc90/0xc90 [ 1476.173849][T26748] ? syscall_enter_from_user_mode+0x24/0x190 [ 1476.179874][T26748] ? syscall_enter_from_user_mode+0x24/0x190 [ 1476.185929][T26748] do_syscall_64+0x2d/0x70 [ 1476.185964][T26748] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1476.185989][T26748] RIP: 0033:0x417b11 [ 1476.186007][T26748] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 21:00:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:00:53 executing program 5: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000400)=0x4) [ 1476.186025][T26748] RSP: 002b:00007fb199084c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 1476.186048][T26748] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417b11 [ 1476.186063][T26748] RDX: 000000000000000f RSI: 00007fb199084cb0 RDI: 0000000000000003 [ 1476.186077][T26748] RBP: 00007fb199084ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1476.186090][T26748] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1476.186103][T26748] R13: 00007ffd27f3c95f R14: 00007fb1990859c0 R15: 000000000119bf8c 21:00:53 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xf, 0x0, &(0x7f0000000400)=0x4) 21:00:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x8, 0x0, &(0x7f0000000400)=0x4) 21:00:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x14, 0x0, &(0x7f0000000400)=0x4) 21:00:53 executing program 5: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000400)=0x4) 21:00:53 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x4000) [ 1476.790216][T26781] sctp: [Deprecated]: syz-executor.0 (pid 26781) Use of int in max_burst socket option. [ 1476.790216][T26781] Use struct sctp_assoc_value instead 21:00:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x10, 0x0, &(0x7f0000000400)=0x4) 21:00:53 executing program 5: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000400)=0x4) 21:00:53 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x15, 0x0, &(0x7f0000000400)=0x4) 21:00:53 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000400)=0x4) 21:00:53 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x0, 0x800000, 0x9, 0xf5a0, 0x0, 0x9, 0x5, 0x2ec}, &(0x7f0000000040)={0xe74dcac, 0x40, 0x80000000, 0xc9, 0x7ff, 0x10e0, 0x8001, 0x6}, &(0x7f0000000080)={0x100000001, 0x80000000, 0xfff, 0x1, 0x4, 0x8, 0x7fff, 0x1}, &(0x7f0000000100)={r0, r1/1000+10000}) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:00:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x11, 0x0, &(0x7f0000000400)=0x4) 21:00:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xc, 0x0, &(0x7f0000000400)=0x4) 21:00:53 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x7, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:53 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000400)=0x4) 21:00:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x16, 0x0, &(0x7f0000000400)=0x4) 21:00:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:00:54 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 21:00:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x17, 0x0, &(0x7f0000000400)=0x4) 21:00:54 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default={0x98, 0x92, 0x9c, 0xaa, 0xb0, 0x40, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:54 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x8, 0x0, &(0x7f0000000400)=0x4) 21:00:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xc, 0x0, &(0x7f0000000400)=0x4) 21:00:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x14, 0x0, &(0x7f0000000400)=0x4) 21:00:54 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/186) 21:00:54 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x7, 0x0}, @null]}, 0x48) 21:00:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x18, 0x0, &(0x7f0000000400)=0x4) 21:00:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x8, 0x0, 0x0) [ 1477.632117][T26837] sctp: [Deprecated]: syz-executor.2 (pid 26837) Use of int in max_burst socket option. [ 1477.632117][T26837] Use struct sctp_assoc_value instead 21:00:54 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ff9000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) shmctl$IPC_SET(r3, 0x6, 0x0) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) 21:00:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x15, 0x0, &(0x7f0000000400)=0x4) 21:00:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xc, 0x0, &(0x7f0000000400)=0x4) 21:00:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x8, 0x0, 0x0) 21:00:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x19, 0x0, &(0x7f0000000400)=0x4) 21:00:54 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:00:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x16, 0x0, &(0x7f0000000400)=0x4) 21:00:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1a, 0x0, &(0x7f0000000400)=0x4) 21:00:54 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r1, 0x6, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r3, 0x0) r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) r5 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x0) r6 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000100)=""/184) shmctl$IPC_RMID(r4, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/127) 21:00:54 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x20000048) 21:00:54 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x8, 0x0, 0x0) 21:00:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x17, 0x0, &(0x7f0000000400)=0x4) 21:00:54 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000400)=0x4) 21:00:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1b, 0x0, &(0x7f0000000400)=0x4) 21:00:54 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null]}, 0x48) 21:00:55 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="a000000cb3429e1000000000002e2a1f58f22dc6a7b5b221f5304de202d929ab766910dda11e048d4f55008d2f62ceb74364df9f9bcddf742d8a7f22792008e863e2190c5b14d70048f2926809604b6d18f094ec44edad3cc60cb0865af50bf2e6b481", @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000040000080001007063690011000200303030303a30303a31302e300000000008000b00280000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ff0f0000"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4050) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000680)=""/194) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x2a, 0x0, 0x2}, 0xc, &(0x7f00000004c0)=[{&(0x7f0000000280)="f70e71bf4240521c957b3f4d557896a6716748467f962e70309caf31c9b8485de384c0a6214d34f00b96ad2ef06c71f984de2162b4b2715f3274e4b422f4761600f988df77c3970b9f8ed28f6525f8907da327c8cd837e0e9c15e6f01efabeaa95302b8d002edeee4b83b7f6f2aad545c37d3ecc36a4155ebab5fc33c5200c67fa7738fd83fdfaa91077261d1ee55746c99be84a77337d4e37b64e992d3de96829a87bfc5f537cdaf19ee5cddad64bab95a071c4cb9a", 0xb6}, {&(0x7f0000000340)="56185ae73202401f04ff137ca3a11ad463e01d690ea50f6c3448437984243040370e521695ad73dd93c1fd0a6c49dc955539523bd4aebe625daf4132f17de1845d9f44caef3945ae1ae2dd6111423a97371b55ca5cefc948b1771bd810cb044f58ee1f2dd431c70e36f373b7e380bd1f0b36a70a9a98d8cc80e36421671193e6b86c977c8fcfbc9543406291da920a6952cba479f4cbbcf309d9414a12ca93ce810608176458e7553f1539d919d08de0c2920fcd73c66dadf8ff5726d8f724ff1f35763b3c19c7a6cef072220ae982752369009ab375fa7f2620a0f142e42d8567b7ebd3c20cebd689", 0xe9}, {&(0x7f0000000080)="0240eb6d446990d6955019d547497aa95fae067c7171a16bea25c349c89b80ea474fdf9234a79654e316f5d9dfd50e20b0876cc6877f44201c7a12bc9b5e679c6cb2ead8f6e92f475de38f76b6bc6d74747c277eb459c7a290d43cedc52c668597d01c7d52", 0x65}, {&(0x7f0000000440)="556f5cbfce23cb41432a4e96ab0e1b9ebcef58d2a9fde534c9a4b7493d272be53985b8210342e55a6b6407518dc1996b6f414d250c8d9c3720dc54142984259f8b7ae82dc9692bcd13c4076b7e2d224ed0abc3ca65c91c819c2e600f0dce5c81ae0ac94e9e8594d0078a012a8ff45cc715", 0x71}], 0x4, &(0x7f0000000500)=[{0xc0, 0x84, 0x7cb, "359ea6c831a42493691bf65ad88cf411c976f308059864894e84bb58f71c11cb53898efe516777e410dd015334878b943fe54a00d54aa9874df98a3368644b4130e8408895d12400a50a958f686db6604a116c12dd580b1a5997e3eca59d29776244aea4e6d69a19bbeaa02690166d31c60d38f1b31cc0f04e6dc66381349dee3c69dc5e8af701727dba7395ad244674968e60bee19f6ee25effb276c9772a44cc5c8d1bec776958f9e5ee578f"}, {0x68, 0x118, 0x9, "a448fa5d8be0fd6d1a2da3aad44ec08eb50161b1b36e4e15d8d028030fa7ca3d0f4d5c3e87d3f87e3e99f3744280a12c4da17eb8fd2dfc30b275180041113d7850c4a90d6036fff760ee9e2ad5d1bf88b6"}], 0x128, 0x8000}, 0x38) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xc8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) 21:00:55 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r1, 0x6, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r3, 0x0) r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) r5 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x0) r6 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000100)=""/184) shmctl$IPC_RMID(r4, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/127) 21:00:55 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000400)=0x4) 21:00:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x18, 0x0, &(0x7f0000000400)=0x4) 21:00:55 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x20010, 0xffffffffffffffff, 0x10000000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48010000", @ANYRES16=r1, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x22000, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x7) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1c, 0x0, &(0x7f0000000400)=0x4) 21:00:55 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000016c0), 0x8) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xd, 0x0, &(0x7f0000000040)) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:00:55 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r1, 0x6, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r3, 0x0) r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) r5 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x0) r6 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000100)=""/184) shmctl$IPC_RMID(r4, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/127) 21:00:55 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000400)=0x4) 21:00:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x19, 0x0, &(0x7f0000000400)=0x4) 21:00:55 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:00:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1d, 0x0, &(0x7f0000000400)=0x4) 21:00:55 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/186) 21:00:55 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r1, 0x6, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r3, 0x0) r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) r5 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x0) r6 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000100)=""/184) shmctl$IPC_RMID(r4, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/127) 21:00:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xc, 0x0, 0x0) 21:00:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1a, 0x0, &(0x7f0000000400)=0x4) 21:00:55 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = getuid() r1 = getgid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x3, r0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x4, 0x9, 0x401, 0x101, 0x0, 0x0, 0x400}) r2 = getgid() r3 = getgid() setregid(r2, r3) 21:00:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1e, 0x0, &(0x7f0000000400)=0x4) 21:00:55 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) r4 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x0) r5 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000100)=""/184) shmctl$IPC_RMID(r3, 0x0) 21:00:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xc, 0x0, 0x0) 21:00:55 executing program 1: ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000080)={@fixed={[], 0x11}, 0x5, 0x1, 0x1f, 0x8, 0x2b8, "3bd21b09bb77171145b178ab31481b66be2f74684109bcbc5d8f3a08f25767d7b4fc49829e68fca215407e23cfea29dd610253a4004056d5a3a686a22d5876370627b136f7e906b1d6cd3320dac0ce7209a65b8fb126be3084edc72cf892f03b6f6214077ac884a908a395cdcbbf4f409d90bd05df6305aa0ae288fd15d24514"}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@default, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 21:00:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1b, 0x0, &(0x7f0000000400)=0x4) 21:00:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x21, 0x0, &(0x7f0000000400)=0x4) 21:00:55 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x10500, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) shmctl$IPC_SET(0x0, 0x6, 0x0) r1 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000280)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x8, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0]}) 21:00:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0xc, 0x0, 0x0) 21:00:55 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) r3 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) r4 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000100)=""/184) 21:00:56 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r4, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r6, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x0, 0x60d6abf1, 0x18, @private2, @remote, 0x7cf, 0x80, 0xfffffda7, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000001c0), 0xc, &(0x7f0000001480)={&(0x7f0000000d80)={0x700, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r7}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1ec}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x2, 0x2c, 0xdb, 0x8}, {0x6, 0x1, 0x0, 0xcab}, {0xc733, 0xfd, 0x4, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x1, 0xff, 0x2, 0x5}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x700}, 0x1, 0x0, 0x0, 0x20060008}, 0x8010) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf250a000000080001007063690011000200303030303a30303a31302e30000000000800030001000000080001007063690011000200303030303a30303a31302e30000000000800030002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1c, 0x0, &(0x7f0000000400)=0x4) 21:00:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x22, 0x0, &(0x7f0000000400)=0x4) 21:00:56 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/238) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/218) 21:00:56 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:00:56 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) r3 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/184) 21:00:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1d, 0x0, &(0x7f0000000400)=0x4) 21:00:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x23, 0x0, &(0x7f0000000400)=0x4) 21:00:56 executing program 3: setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x80000001, 0x4) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:00:56 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:00:56 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) r3 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/184) 21:00:56 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:00:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x1e, 0x0, &(0x7f0000000400)=0x4) 21:00:56 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/138) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x2000) 21:00:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x24, 0x0, &(0x7f0000000400)=0x4) 21:00:56 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) r3 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/184) 21:00:56 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:00:56 executing program 1: r0 = socket(0x3, 0x80000, 0x9) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080)=0x1) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x2, @bcast}, [@default, @null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) accept$ax25(r2, 0x0, &(0x7f00000000c0)) 21:00:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x21, 0x0, &(0x7f0000000400)=0x4) 21:00:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x25, 0x0, &(0x7f0000000400)=0x4) 21:00:56 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) r3 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000100)=""/184) 21:00:56 executing program 3: syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x5d, 0x6}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x4, 0x8, 0x6a, 0x8, 0x7}, 0x261, &(0x7f0000000080)={0x5, 0xf, 0x261, 0x6, [@generic={0x87, 0x10, 0x1, "9a9c93ec47786b3c6de3a138c1d214ba36001d0bb42f9b80b346d6070b34c33083e9aa54266d9051cfbdb7189d7190a0b708f8f99ae86b765521a3a1d0e378cffbc952069d428d10cc90ccc21ce3ac84242864411b02e729a973f72147a06bdd49d16451d6cdd30f3be948296b530c2fee15ed9e5a194ceb724dbef48e19cae1c2c88bf7"}, @generic={0xf3, 0x10, 0xa, "9566cd79323798649a10104fb613bc2780fb045a1e22ef3ea9a784b1ca1731a8f508a2f9db892c90ea96091e5d8ff62d2252a0553040e6d35fe2838b06e30ba1d9ad4c7066e35b800b60f732ae70efecf3e07058700bb176e3a2d0709167ba5eccefc34cb43de831234e1fce9612eaa476111433c96114b8fd77060a2696180ab87feae3701eb2ff9808cbb6aa5bee17cb4b4ac5334f957040f04543f117adb426dd212409aec4d40ca9b896011c234cdead21ed10a82f835ea35f02fe9cc14704af5b121307c61283ff50eef029c4bd10f7a69eea64e7115306b54fadd8db1135ea034a10829d6e334559e72b11a2e9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0x1f, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xd3, "29ec313faf3d8002d29a5564ae48ac7b"}, @generic={0xbd, 0x10, 0xb, "240f3172c0536330ca4440181a8c5d7a00fa9e8c00b5d8ce25ad57d704f46e6bd632d0ff16f88f9398fd4316f0d0a880449b3157ba1e49c6703585d21f20e5d792d3e295dd36f69a9a6777952c6decd2f2eac0223dc83385ed0edc9abe454b9c6d2a419f1d8f15234d78e7c4061019e46f8af55c4758a227a491b8c7563f4349ce64a9136d42ae4e432b0c54c1ed48db11ac07888a40f3ab546b305aeb18143cf48bd3c11f368cf5aea6f30d8bee3cbed29262868f25b2dc9f08"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x0, 0x4}]}, 0x5, [{0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0xd0, &(0x7f0000000340)=@string={0xd0, 0x3, "8e706a0b5f3a11dd55518d58985873178d2e4c4296672a75c9bc9c041925f54c5026a71440d2061f6d389dc6cd835146b8e29b316677d0c7beee2da6cb979a96b0a406b0701d97da0bbc6565e472c1ca3062de2600205e9300c3b153bf7968e860732f7aa3d2b0eec37cd79e7f30d223c7f7612c368c4a61e917e274de1d63c5d4e23b7c41d0518079cc1b4c6aff7c06a8f8f224fd42c8545f77e93db7b0133256079b6a27b0d5b089c37602318e628c2c5c30a3e1bbdfedfc517e9a9f74bc0d68242dd1f1233ad20c968b410919"}}, {0x9f, &(0x7f0000000440)=@string={0x9f, 0x3, "1656a5e71ac0a92dd2d9ebe52c3578b08c8632797f433906c3671d2535f78fe26d935a9844c72f07ec7bd9ebb63f8d6f9eed7d21d7875cb65a18d6cf2deba0f36a5c4d2b3ba2136285ff3743d7fe9f8253f7e6140351dbf18708633578e9bf5aec6e27fd17c25693d71cd59468a55ef148160be8e0a2983a1ad027d30463797730f5bea6274b80a939b4d39cadfb70111ca703f2f9e96471faff3a663d"}}, {0x56, &(0x7f0000000500)=@string={0x56, 0x3, "daf7bf20363c2b01b0fa1664e011ed89b08c44007518984cac42111dace630ebada7845078e213dbfd98794abee8c3cc7e876486b73108867e2148b82827bc50ff42a8931fa1acf8cb29c903c2899e8fb4aec9ae"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc01}}]}) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:00:56 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:00:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x22, 0x0, &(0x7f0000000400)=0x4) 21:00:57 executing program 1: syz_init_net_socket$ax25(0x3, 0x2, 0x0) 21:00:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x66, 0x0, &(0x7f0000000400)=0x4) 21:00:57 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) r3 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000100)=""/184) 21:00:57 executing program 5: bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:00:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x23, 0x0, &(0x7f0000000400)=0x4) 21:00:57 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) recvfrom$ax25(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x100, &(0x7f0000001080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @default, @null, @bcast]}, 0x48) 21:00:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)=0x4) 21:00:57 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) r3 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000100)=""/184) 21:00:57 executing program 5: bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) [ 1480.805774][ T34] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 1481.115575][ T34] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 1481.123369][ T34] usb usb4-port1: attempt power cycle [ 1481.776231][ T34] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 1482.075939][ T34] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 1482.083795][ T34] usb usb4-port1: unable to enumerate USB device 21:01:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x24, 0x0, &(0x7f0000000400)=0x4) 21:01:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x6d, 0x0, &(0x7f0000000400)=0x4) 21:01:00 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000100)=""/184) 21:01:00 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r1, 0x6, 0x0) r2 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000000)=""/132) 21:01:00 executing program 5: bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:01:00 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) socket$inet_udplite(0x2, 0x2, 0x88) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000080)=0x1) 21:01:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x25, 0x0, &(0x7f0000000400)=0x4) 21:01:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x6f, 0x0, &(0x7f0000000400)=0x4) 21:01:00 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000100)=""/184) 21:01:00 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:01:00 executing program 1: accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x800) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x2d0102, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:00 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/223) 21:01:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x70, 0x0, &(0x7f0000000400)=0x4) 21:01:00 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000100)=""/184) 21:01:00 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:01:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x66, 0x0, &(0x7f0000000400)=0x4) 21:01:00 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) 21:01:00 executing program 1: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 21:01:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x71, 0x0, &(0x7f0000000400)=0x4) 21:01:00 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) r4 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000100)=""/184) 21:01:00 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:01:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x6c, 0x0, &(0x7f0000000400)=0x4) 21:01:00 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)={'batadv0', 0x32, 0x36}, 0xa) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x74}, 0x1, 0x0, 0x0, 0x200448d4}, 0x3576c10bd52e8ba0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r2, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r5, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r7, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x220, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x204, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x8, 0x7, 0x2, 0xff}, {0x1, 0x7, 0x38, 0xf5e}, {0x6, 0x3, 0x4, 0x3}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x839}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xe2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x3, 0x1f, 0x7f, 0xe61b}, {0x200, 0x2, 0xd1, 0x3f}, {0x8, 0x7, 0x5, 0x3f}]}}}]}}]}, 0x220}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) 21:01:00 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x0) 21:01:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x72, 0x0, &(0x7f0000000400)=0x4) 21:01:00 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000100)=""/184) 21:01:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x6d, 0x0, &(0x7f0000000400)=0x4) 21:01:00 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:01:01 executing program 1: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x12, 0xffffffffffffffff, 0x8000000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x400180, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000300), 0xffffffffffffffff, r1}}, 0x18) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4007, @fd=r3, 0xfff, &(0x7f0000000240)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000140)=""/222, 0xde}], 0x2, 0x1}, 0x16d13733) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r3}, 0x8) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4100852, r5, 0x55000) bind$ax25(r4, &(0x7f0000000000)={{0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 21:01:01 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000100)=""/184) 21:01:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x73, 0x0, &(0x7f0000000400)=0x4) 21:01:01 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = getgid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, r1, 0x0, 0xee00, 0x49, 0x7}, 0x96, 0x935, 0x6, 0x2, 0xffffffffffffffff, 0x0, 0x1}) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/114) shmctl$IPC_SET(r0, 0x6, 0x0) 21:01:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x6f, 0x0, &(0x7f0000000400)=0x4) 21:01:01 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:01:01 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r0, r0, 0x8, 0x8a, &(0x7f00000000c0)="504b2bc03787c952055264549413ff30580dbe8bcbae9a49ec160fa2f438fed7daed5de2c7e66bb893db79b6cd28437ec5ea78b21df52cc8110f323d43843e6414e755e57dbcf207aff7b09d32ce6ce27f9a01133bc8a27c2c23012d7d0e7472dd83a89c5dc554d5ff90fe46017bff2bb11d62b8b00b7c462b969a018683de4fba0b2f87c05ad96cb81a", 0xf9, 0x3f, 0x258c, 0x7, 0x3f, 0x1, 0x4, 'syz0\x00'}) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x74, 0x0, &(0x7f0000000400)=0x4) 21:01:01 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/44) 21:01:01 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) r2 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/184) 21:01:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x70, 0x0, &(0x7f0000000400)=0x4) 21:01:01 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:01:01 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) r2 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/184) 21:01:01 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = accept4$ax25(r0, &(0x7f0000000080)={{0x3, @rose}, [@bcast, @default, @default, @default, @bcast, @rose, @netrom, @bcast]}, &(0x7f0000000100)=0x48, 0x80800) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @bcast, @null]}) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:01 executing program 3: r0 = socket(0xb, 0x80000, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket(0x11, 0x805, 0x3f) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1e) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x6, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) 21:01:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x75, 0x0, &(0x7f0000000400)=0x4) 21:01:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x71, 0x0, &(0x7f0000000400)=0x4) 21:01:01 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:01:01 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) r0 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000100)=""/184) 21:01:01 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) io_uring_setup(0x1cac, &(0x7f0000000080)={0x0, 0x4677, 0x10, 0x1, 0x177}) 21:01:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x76, 0x0, &(0x7f0000000400)=0x4) 21:01:01 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, [], 0x1}, 0x9}, {0xa, 0x4e24, 0x7ffc, @remote, 0x5}, 0xffffffffffffffff, 0x7fffffff}}, 0x48) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x4a0000, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x3, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e20, @broadcast}}}, 0xa0) 21:01:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x72, 0x0, &(0x7f0000000400)=0x4) 21:01:01 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:01:01 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000100)=""/184) 21:01:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7a, 0x0, &(0x7f0000000400)=0x4) 21:01:02 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/225) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01, 0x11, 0x6}, 0x6, 0x57, 0x7ff, 0x1000, r1, 0xffffffffffffffff}) shmctl$SHM_LOCK(r0, 0xb) 21:01:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x73, 0x0, &(0x7f0000000400)=0x4) 21:01:02 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) bind$ax25(r1, &(0x7f0000000080)={{0x3, @bcast, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) epoll_create(0x6) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:02 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:01:02 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000100)=""/184) 21:01:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7b, 0x0, &(0x7f0000000400)=0x4) 21:01:02 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000100)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={r1}) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:02 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0xb}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000080)=0x4) shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_SET(0xffffffffffffffff, 0x6, 0x0) 21:01:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x74, 0x0, &(0x7f0000000400)=0x4) 21:01:02 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:01:02 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000100)=""/184) 21:01:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7c, 0x0, &(0x7f0000000400)=0x4) 21:01:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x75, 0x0, &(0x7f0000000400)=0x4) 21:01:02 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:01:02 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r2, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r4, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x81, 0x4, 0xd4, 0x40, @rand_addr=' \x01\x00', @loopback, 0x8, 0x8000, 0x28000, 0x20000000}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x1f, 0x0, 0x10, @local, @rand_addr=' \x01\x00', 0x8000, 0x8000, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x354, r0, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x84, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x200, 0xa3, 0x6, 0xb72}]}}}]}}, {{0x8, 0x1, r7}, {0x13c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x2, 0x27, 0x2, 0x7fff}, {0x8000, 0x2c, 0x4}, {0x8, 0x80, 0x81, 0x7}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6b9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xbee}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x354}, 0x1, 0x0, 0x0, 0x44811}, 0x10) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:02 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x8, {0xa, 0x4e23, 0x1, @loopback, 0x9}}}, 0x38) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r5, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r7, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000000b40)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/250, 0xfa}, {&(0x7f0000001cc0)=""/98, 0x62}, {&(0x7f0000001d40)=""/41, 0x29}], 0x4, &(0x7f0000001dc0)=""/239, 0xef}, 0x2163) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000029c0)={&(0x7f0000001f00)={0xaa0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x400}}, {0xfffffffffffffff2}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1cc3c57d}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x56}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x741}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x6, 0x80, 0x3, 0x400}, {0x8, 0x3, 0x9, 0x101}, {0x5, 0x7, 0x7, 0x6}]}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}]}}]}, 0xaa0}, 0x1, 0x0, 0x0, 0x10081}, 0x40) accept4$ax25(r0, &(0x7f0000000080)={{0x3, @rose}, [@remote, @rose, @remote, @remote, @bcast, @rose, @netrom, @null]}, &(0x7f0000000100)=0x48, 0x80000) bind$ax25(r0, &(0x7f0000000200)={{0x2, @default, 0x3}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:02 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000100)=""/184) 21:01:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7d, 0x0, &(0x7f0000000400)=0x4) 21:01:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x76, 0x0, &(0x7f0000000400)=0x4) 21:01:02 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:01:02 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 21:01:03 executing program 4: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/184) 21:01:03 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10810}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc020) shmctl$IPC_SET(0x0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40d0}, 0x20000004) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000002040)=""/4111) 21:01:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x82, 0x0, &(0x7f0000000400)=0x4) 21:01:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7a, 0x0, &(0x7f0000000400)=0x4) 21:01:03 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:01:03 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getrusage(0x0, &(0x7f0000001500)) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @bcast, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 21:01:03 executing program 4: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/184) 21:01:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7b, 0x0, &(0x7f0000000400)=0x4) 21:01:03 executing program 3: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x400000a, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xee, 0x5, 0x1}, 0xea) r1 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_SET(r1, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x4, 0x6, 0x3, 0x9, 0x2a, @mcast2, @dev={0xfe, 0x80, [], 0x15}, 0x8088, 0x20, 0x0, 0x4}}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r6, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r8, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@private}}, &(0x7f00000004c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000500)={0x918, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x80}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x44, 0x4, [{0x6, 0x7, 0xff, 0xff}, {0xff, 0x2, 0x0, 0x64293195}, {0x4, 0x6, 0xac, 0x100}, {0x81, 0xe9, 0x9, 0x10000}, {0x0, 0xc0, 0x6, 0x6}, {0x8c55, 0x3f, 0x1, 0xfffffffd}, {0x200, 0xb0, 0x3f, 0x1}, {0x1f, 0x2, 0xf0, 0xaa}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xd4d}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xffff0e36}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x4, 0x0, 0x3, 0x9}, {0x80, 0x8, 0x48}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x1f, 0xff, 0x62, 0x44}, {0xff, 0x20, 0x6, 0xa0000000}, {0xec, 0x4, 0x8, 0xfffff801}, {0x2, 0x7f, 0x9, 0x400}, {0x81, 0x1, 0x44, 0x10000}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xcd20}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xd4ec}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x100}}}]}}]}, 0x918}, 0x1, 0x0, 0x0, 0x4000011}, 0x8000) 21:01:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x83, 0x0, &(0x7f0000000400)=0x4) 21:01:03 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:01:03 executing program 1: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000080)=""/224) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket(0xb, 0x6, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r0, r1, 0x4, 0x2a, &(0x7f0000000180)="53229d6ec8b53207c646341f4437d5481918494e8cf960c47aa374305ce9e17c6557a7286a0f5d123ed0", 0x0, 0x4, 0x8, 0xf70e, 0x4, 0x7, 0x80, 'syz0\x00'}) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000580)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:03 executing program 4: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/184) 21:01:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7c, 0x0, &(0x7f0000000400)=0x4) 21:01:03 executing program 5: r0 = socket(0xb, 0x80000, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket(0x11, 0x805, 0x3f) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1e) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x6, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) 21:01:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x84, 0x0, &(0x7f0000000400)=0x4) 21:01:03 executing program 3: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) shmctl$IPC_SET(0x0, 0x6, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0xfffffffffffffffe, 0x2, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @empty}}}, 0xa0) 21:01:03 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000340)={0x200, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}}, {@pci={{0x4d, 0x1, 'pci\x00'}, {0x70, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4a}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x20004001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x79, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) 21:01:03 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000100)=""/184) 21:01:03 executing program 5: r0 = socket(0xb, 0x80000, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket(0x11, 0x805, 0x3f) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1e) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x6, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) 21:01:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x7d, 0x0, &(0x7f0000000400)=0x4) 21:01:03 executing program 3: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'veth1_to_team', 0x32, 0x39}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@xdp={0x2c, 0x2, 0x0, 0x8}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="d2ff690349c456dab839c3e33bb637153e72d83b7d86b4d77f87dc22000a1c22daab56e5e7fd2b34845a50dd609776c8fecd0a309c61a43da61f380069da00dd0cfe690b627c45c991c7ce6cb39918b33365835dbba1bb36d42494a6145117da771f66ec82c944f0a50702c0a7dd26", 0x6f}], 0x1, &(0x7f0000000140)=[{0xd0, 0x10f, 0x80f, "ca7a1e870d132cffb6c600e6fbfc4fe5e7e239d3867dfdcffec3783e1e970d20715550a1f7d4728e127e7790271e67f9c03bc045500439fca722697957502425d5641deca322714a15319b1a98e37de985148d5fea2e1f19cdf09a090af06a69fa89ac54ca6553ab5ea7529da4f6a97c57be03ceebce0818dd444f0b4b97a6265adc0a2e84a2c7c8f9cdc7a36b27b3588f2035e91d090e99640c0767259b8c30f1ce44c99b62a165290268eb08e80f3ca702aa3bc90d45ab6b"}], 0xd0}, 0x0, 0x4, 0x1}, 0x8001) 21:01:03 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/184) 21:01:03 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f00000000c0)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) r2 = socket(0x2b, 0x3, 0x6) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) 21:01:04 executing program 5: r0 = socket(0xb, 0x80000, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket(0x11, 0x805, 0x3f) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1e) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x6, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) 21:01:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x82, 0x0, &(0x7f0000000400)=0x4) 21:01:04 executing program 3: shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/74) shmctl$IPC_RMID(r0, 0x0) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_SET(r1, 0x6, 0x0) 21:01:04 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x80) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000000)) 21:01:04 executing program 1: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) 21:01:04 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/184) 21:01:04 executing program 5: r0 = socket(0xb, 0x80000, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket(0x11, 0x805, 0x3f) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1e) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x6, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) 21:01:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x83, 0x0, &(0x7f0000000400)=0x4) 21:01:04 executing program 3: shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x4, 0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:04 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400100, 0x0) bind$ax25(r1, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:01:04 executing program 5: socket(0xb, 0x80000, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = socket(0x11, 0x805, 0x3f) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1e) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:04 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/184) 21:01:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x84, 0x0, &(0x7f0000000400)=0x4) 21:01:04 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xff}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x53a6}]}, 0x5c}}, 0x8000) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x7, [0x9, 0x3, 0x80, 0x8f, 0x5, 0x8, 0x4]}, &(0x7f00000000c0)=0x12) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x10}, 0x5432) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040), &(0x7f0000000000)=0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:04 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, 0x0) 21:01:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x6, 0x4) 21:01:04 executing program 5: socket(0xb, 0x80000, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = socket(0x11, 0x805, 0x3f) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1e) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) 21:01:04 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bind$ax25(r0, &(0x7f0000000000)={{0x3, @bcast, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:01:04 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f9b}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000180)=""/4096) 21:01:04 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, 0x0) 21:01:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x500, 0x0) sendmsg$qrtr(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x2a, 0x2, 0x8000}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000240)="e74be010d938ac52841edebc8ba02b96aec1b1fb7949d8c7f351fa64556f851a7396ad43b2ae28bc01324cda175d5cf8963f579706f4a002faaf86cec67f650b05af5b9e213b36a2c72299d857856cd3827de5dea5e9d6676022cc0658ca937fda0691123d8fcf3cd7c4867e488bad2c105cc5f3fc878cd7fee9f7013e6871a4c075839c5235a9c3270170629f0112", 0x8f}], 0x1, &(0x7f0000001440)=[{0xd0, 0x105, 0x2, "d757c38f1d6874957a735612cd5ba85b4ad0e8206b9ca1ed6301871610b321425dee0ca33ced7ce1ee0f6cbce3fa25b68ae5cd4e10ac5587bff3715b91bc9c7b3f5cf17ad9a4c2b0409860cf2ad50a5fdf4ea9bd5d58aaaa86be28f98cb3c3b219ffca6f1da5003419bb9586351f730ecb1f87b99c403b62161e1759f01f384d8b213abcab54f1fa37ac4f37c899be0f92f9cb166140355afac123a1e6104ecbba0f80b2e5a318ecffddae098438bea4e50adbcd5a6cc8fa2b3c5f"}, {0x98, 0x119, 0x6, "fdadd51464b989c412210052869a91ccdd0196d6ed2175a94e15ef5891f8c5520cb5c6dd40f99e8f08ae96892c9b3267ddf927b761811be20e5d6247b06651ed605b5199a8656b037a5a1eade85e419a3caa32c1fe63147bd8252882d50807af83080a9dcb143cda91d34863b3e985a7629941f6923e156e0ceaa7f0aed2b7b90692449a66"}, {0x48, 0x10a, 0x101, "ae193a168a1a12265f5026d7216a53f1f970e73746e587dca98767ae0746d11ca11503a9c835ad7c44d0ed8b9ea6b801a1bb6a70"}, {0x10, 0x116, 0x8}, {0x20, 0xff, 0x100, "f567aa18a1cc43d3cef24b20"}, {0x70, 0x10b, 0x2, "3cc2563ddba18de2b20f967699c2183a7ca233d88fe39c8eaee216509aa46737f8271eed2caddbbe77776fd7a00d287a20b345ffa922a8f6282d4cb58a8e04a9a4bcba7d43f44d16d67415ef38a0e1c37b1a62ed03483e7ce7b4"}, {0x80, 0x113, 0x5, "0fc68dd081b2e8406738482c4ee7c2903a3ad801576db42f0119647576059129a21226d19312b1d557aafa2bffec77a0556517de6f89a80324a49896854874dbbb4776387b50f0fcb14dd501ca288d91285776ba82aa200ef78d07f4df5d726e4d5699a81f0776745143344dfd8f24"}], 0x2d0}, 0x38) 21:01:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) io_uring_setup(0x1f39, &(0x7f0000000000)={0x0, 0xf643, 0x2, 0x1, 0x225}) 21:01:05 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/147) 21:01:05 executing program 5: socket(0xb, 0x80000, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = socket(0x11, 0x805, 0x3f) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1e) 21:01:05 executing program 1: mq_unlink(&(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00') r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/40) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x2, 0x20}) 21:01:05 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, 0x0) 21:01:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) 21:01:05 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/18) 21:01:05 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x20000, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x69e200, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x13, 0x0, &(0x7f0000000040)) openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) 21:01:05 executing program 5: socket(0xb, 0x80000, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket(0x11, 0x805, 0x3f) 21:01:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x120, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8814}, 0x40000000) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000300)={0x0, 0x3, 0x40, 0x3, 0x2}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:01:05 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, 0x0) 21:01:05 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xcb43, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x5, 0x4104c0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r3, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xfffffff6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r5, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/key-users\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', r8, 0x2f, 0x20, 0x40, 0x2, 0x50, @ipv4={[], [], @multicast1}, @private0, 0x7820, 0x7, 0x2, 0x80}}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r9, 0x0, 0x0) sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000100)={0x1d, 0x0, 0x3, {0x0, 0xf0, 0x1}, 0xff}, 0x18, &(0x7f0000000180)={&(0x7f0000000140)="245f69244b453c1efe4f2871bc1c6d4dec154ab1e938cdd9b572ee3ef7619a5b804d004eee9575bb35720c98816bc3ff1d107e7cc7", 0x35}, 0x1, 0x0, 0x0, 0x10000}, 0x4004000) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)={0xcb, 0x7, 0x7f, 0x4, 0x3, 0x4, 0xa8}, 0xc) 21:01:05 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r1, 0x6, 0x0) 21:01:05 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x9, 0x80) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000280)={0xbc44, 0x18, [{0x3}, {0x7, 0x1}, {0x7, 0x1}, {0xf, 0x1}, {0xd}, {}, {0x2}, {0x1}, {0x8}, {0xf, 0x1}, {0xd}, {0xe}, {0x9}, {0xd}, {0x2, 0x1}, {}, {0x8, 0x1}, {0x8}, {0x8, 0x1}, {0x4, 0x1}, {0x4}, {0xb, 0x1}, {0xe}, {0x3, 0x1}]}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast}, [@rose, @rose, @rose, @netrom, @bcast, @rose, @netrom, @null]}, &(0x7f0000000100)=0x48) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null}) getsockname(r2, &(0x7f0000000140)=@caif=@util, &(0x7f00000001c0)=0x80) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:05 executing program 5: socket(0xb, 0x80000, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 21:01:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x4, 0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x6]}, &(0x7f0000000040)=0x6) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000080)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x56}) 21:01:05 executing program 1: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:05 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 21:01:05 executing program 5: socket(0xb, 0x80000, 0x1) 21:01:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:05 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r1, 0x6, 0x0) 21:01:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000000)={@fixed={[], 0x11}, 0x1, 0x3f, 0xc17b, 0xff, 0xfeff, "0db7dd4b85f7f6b40ed433a2d3e4018ff1ecb83a01b284a074bd8ec56f6beccb558714aa584d5eef895e29c5b18697a967e8485978abd5040e33386599bf2e02b92fe9418267c6ba421d9b9d492aad63423c413f93edf56f1b7e75ce828ef3b3595fe2130653087783d10cc2256186ad7f1b0ccde4918a80fc699928495c3bd0"}) 21:01:05 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 21:01:05 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:06 executing program 5: socket(0x0, 0x80000, 0x1) 21:01:06 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x101, 0x80000000, 0x4}) r0 = socket$inet_sctp(0x2, 0x6d6536fd977ec9b0, 0x84) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0)=0x7, 0x4) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x3) sendmsg$qrtr(r1, &(0x7f0000000600)={&(0x7f0000000100)={0x2a, 0x4, 0x3fff}, 0xc, &(0x7f0000000500)=[{&(0x7f0000000140)="1d5b448679c4d71965764b5479a84b8a8d0a667d7b5bb8b0a7d6a135994e6a82d441576b1825b2dc55d7baa15df5973712b2a51af90390a015996cb64fa8d929eeb12e44c646a89e8e32dfae83d6c4458e37b29616461b2c4b8b0e8e1c95e0bf04b16e0a", 0x64}, {&(0x7f00000001c0)="7f38cd74bdab7b580270fd273aefcfc4b65f83973818c0a5255b4fdc0cbf312e0e5e", 0x22}, {&(0x7f0000000200)="826fd2230e709b001fd12517d5ac56719862e749a6ae2d69c468f8c49814da31a5071cf6e75cdc2aaacd6ae0ccf7f994355354030a4c26d28cf7bb22778b114ee8e64a3d0a7b5d1f0b64c188582e73", 0x4f}, {&(0x7f0000000280)="d89447c1f950bf62f5723e99672d4d5f4d716d0a219f21b3fa0d92cc0046960600ee66077287243e0ad8d2798671b80294b28672685ee23b43a1b14cbe56e7ae048bdc14f2c41c896360d1f43ee85ec6d7c5013d1714843c9312924ca730d0d9149a98df5d763ac85756b438d342eee106477459f0d8399b1cf837f5f0", 0x7d}, {&(0x7f0000000300)="aa9bfa560aaedaf0aa97c1a4b88f4da29222610433683299f2460c5729d5d633327f72f46f04ffb3aaa3ddd68d319e578dff275b73b27ed51838afab7d6a04e8a5be0808bb3b969beab110f907d1fe624536eb558d8d9bacfd375e99b3c0e9f30fd32f31823eebb15e9a367f7331ff1131d13718a4841ac1fb32612f278fc3c5e220d463095021de6249ce6363ec4180b84bf251bfe87e230f25910687fd24621119976856c0a87962ee8c8f36ca4d9c79114af26b23de48c9d072ec16f54965a31f35f8121c56c980f96890c9c35b7b8a9a64d14ac84995e48afad92b6c22b0a9e9f7725167d6", 0xe7}, {&(0x7f0000000440)="7b736235b61e31dfa5390df1ba6448fb9e7500389dbc4623a3b8e06a9c10b4816e82496ab6d77238a561d4860a92a1526d63d952deb7246764b96f4c8de575481ec6f987ca6d6a4431180e69078f54bf3c498dddd977807cb0559f3af82673a66a8f590141c92d33f5ba9fd282b1c8353c1f882367df2149e7596009e3bd2b3605d2575f3b41f680d1576c710eaf68be1dcdb78bf1a5368c21132464b649cf5a56147ea9fe96e8f0916f64282147f537f524d5fc4e29c95ef920ba835177e8", 0xbf}], 0x6, &(0x7f0000000580)=[{0x28, 0x108, 0x3ff, "5a2ee686246b1ea29f845d70c5f71b996b415c"}, {0x28, 0x119, 0x6, "1e801851d827db0e6041330fd25c5d22092a3f08232361"}], 0x50, 0x4008841}, 0x38) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:06 executing program 1: ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={@any, 0xfff}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:06 executing program 4: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) 21:01:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x10000000) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x81, 0x9, 0x42, @remote, @ipv4={[], [], @private=0xa010101}, 0x10, 0x7800, 0xffffffff}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r5, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r7, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000840)={0x29c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x13}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x42d}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}]}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x800}, 0x4040040) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r0, 0x0, &(0x7f0000000080)="54271588be32b16615d6fa8281fa76f16d61ce38eaf1a6970fb78c0131286329491ce352e48e33c7e4e79b4e7ebebbca2914e0481a56facf3b6501f959babc04f79926c259ca3f1e897a832b3bc10aa234", 0x51, 0x4002000, 0x1}, 0xfffffffc) 21:01:06 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_SET(r1, 0x6, 0x0) 21:01:06 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/184) 21:01:06 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:06 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/timer\x00', 0x2880) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000002c0)=0x1) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null]}, 0x48) recvfrom$ax25(r0, &(0x7f0000000180)=""/138, 0x8a, 0x3, &(0x7f0000000240)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @default, @bcast]}, 0x48) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000080)={@none, 0x0, 0x0, 0x3ff, 0x3, 0x3, "1b4ef5230ee93bfd59773720e47a8d0cbcc38e694ab3c3017be59f4abf09b97635bc6e92d701a0bb95dfe7864f48f5c16c64fe14d821fc23ff8f6af8e625384d0909f78d589d620a389612406158db2f37a708efb27395a5b7312586e5395c9e102b277c7f16fff9b7060abe36b9e31fcd5344e15550ed513dffe809d8d6250c"}) 21:01:06 executing program 5: socket(0x0, 0x80000, 0x1) 21:01:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r3}}, 0x18) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r4, 0x0, 0x0) write$cgroup_devices(r4, &(0x7f0000000040)={'b', ' *:* ', 'rm\x00'}, 0x9) 21:01:06 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/194) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 21:01:06 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f00000000c0)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) r2 = socket(0x2b, 0x3, 0x6) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) 21:01:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:06 executing program 5: socket(0x0, 0x80000, 0x1) 21:01:06 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x1, 0x0) write$smackfs_logging(r0, &(0x7f0000000000), 0x14) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000000)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) accept$ax25(r1, &(0x7f0000000180)={{}, [@default, @remote, @bcast, @default, @netrom, @netrom, @default, @rose]}, &(0x7f0000000200)=0x48) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}]}, 0x20}, 0x1, 0x0, 0x0, 0x40081}, 0x84) 21:01:06 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x13, 0x0, &(0x7f0000000000)) 21:01:06 executing program 4: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/194) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) 21:01:06 executing program 5: socket(0xb, 0x0, 0x1) 21:01:07 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) accept$ax25(r1, &(0x7f0000000200)={{0x3, @default}, [@remote, @null, @default, @default, @default, @netrom, @remote, @bcast]}, &(0x7f0000000280)=0x48) r2 = accept$ax25(r0, &(0x7f0000000080)={{0x3, @netrom}, [@null, @default, @remote, @default, @netrom, @null, @default, @rose]}, &(0x7f0000000100)=0x48) recvfrom$ax25(r2, &(0x7f0000000140)=""/48, 0x30, 0x2, &(0x7f0000000180)={{0x3, @null, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @bcast, @bcast]}, 0x48) 21:01:07 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:01:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) 21:01:07 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000340)={0x200, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}}, {@pci={{0x4d, 0x1, 'pci\x00'}, {0x70, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4a}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x20004001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x79, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) 21:01:07 executing program 5: socket(0xb, 0x0, 0x0) 21:01:07 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:01:07 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0xf, 0x4, 0x6) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x4, {0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6844b412}}}, 0x38) 21:01:07 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_SET(r0, 0x6, 0x0) 21:01:07 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) r4 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000100)=""/184) 21:01:07 executing program 2: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x401}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000a00), 0x13f, 0x1}}, 0x20) r6 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x40, 0x12001) sendmsg$qrtr(r6, &(0x7f00000009c0)={&(0x7f0000000280)={0x2a, 0xffffffff, 0x8000}, 0xc, &(0x7f0000000800)=[{&(0x7f0000000300)="1f4b5a26ea1a0967f167b6074ed1fb043fe886742abc797e9e1f7bf5aa7969dea04bb23595f1402e2cda76e7d0ff58cfdb05b04548296ceaa19e8481f8072e430103d759d148c3cbf80c90ffe1d5f35ce86b076fed299bff1f8e0c6cc2fed3507350e19deafb4a89a5649b9e1b2347214bdd07b3f1feb2a6a22e9337cf2820c339e8f10799931a51fa088f45f733f46e07140e1a1a63fd1b180c9f07c4062aa3c4ce423fcaa0473839ef886dc1ff817a930de2992d4bbdffd44e02643f436ff27a1b9d", 0xc3}, {&(0x7f0000000440)="6a158a74da642e8d7baf6406bca25cc80f8e56c1c509b6a7b616fe0ad33fb03031ecea0ef19e1350705164323f8d412adff787767c966e2970228e2e4b84009b0e2896c9b853635c7f7655008e5e3d5ce996d617871c0e3ab8c5a43b74a5290c21162a3f7e7c5ff8b9003bac548d07f53bc09207972d8a6c6b4d4b3d4cb0e249de2c027c70dd27f6917bfdfa7a43a61fcc722c4fde3cb8d1d02cb8f05678fbed35b5d4b8fe4cb6ccfff07b91180b0294f3b9a1bec59fdac2787fadb3dc6fd3a70fcdb3975e58ce1113c5f2931fb1b8063a1f182013e3e881cae2ceb6f644235c63c39254fd4e20", 0xe7}, {&(0x7f0000000680)="6169c4e8d512573391e9f1c6", 0xc}, {&(0x7f00000006c0)="e720b9250357eec6f5c8d218cdc1e834ac7f6e6224be118dd25b5bdaba2431eb07b27ba8cea8040da6fc767a41daa3669a8e3dec1dfc27ac946065b338aa1a254cab83fad13db6019703a7483da8d7ecb142e9aa36867af3019083431d15da65d05691c13bffde45ab9b0c5ad94bd86bbfdd3180ae5b3f79dc977f8cb3", 0x7d}, {&(0x7f0000000740)="e586f853e94ba8ed82f781282036026c33474151b17845e61a366033b53e41bab0c65821645db086bed9e3562c0eb3d610", 0x31}, {&(0x7f0000000780)="8034746cd3d550ada9c620ab9f3b2ec7adfc43c31f9417a5959e339153845df825994092b16c3718565ffc5514c9caedf1f97bd1332ba91ff5b9dbddb24dd625e46ebf5b82519ec1bf4df3b8dc5d4307afe3209bfc972c870ce94856c9c5276d17020a94", 0x64}], 0x6, &(0x7f0000000880)=[{0xe8, 0x6, 0x81, "6387dbeaa0d1ed189ff21cc195c232a61f25b29b7d3f4805472a69d07db6bd445fe683e8d274372c95b85a8d1c281dfab6d6e5050b878117c967ccdfcb741ef18f7d756ae771aa908acad713341e030f6c9c6d6116118101ef6ac9b17131de8d2b63ea881ea004667f9618c68594132b9f75f873189749a724fb6293c5524d866d7ce4efb39712bdb80fb155b75fc147465cd661ff6466c6797a4b89e58d8d558a971354cd0da18021e64c90bbcfa3370455272b4530020980dd90d10edb6f776c942ddc14404cf077530f430e9410c6eefe8209e6d8c689"}, {0x40, 0x84, 0x1, "3b50eb778c4de3336d754f0943d7da3dbb5ccc61ce62c7047ca19641be12d7470082b4d8f908a79e01b5212e02f2f87c"}], 0x128, 0x20004080}, 0x38) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x4f06958f9b1f9817, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x80, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r7}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:07 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = accept4$ax25(r0, &(0x7f0000000080)={{0x3, @netrom}, [@remote, @rose, @bcast, @null, @netrom, @default, @netrom, @default]}, &(0x7f0000000100)=0x48, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000140)={@null, @default}) 21:01:07 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x408800, 0x0) getsockname(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r1, 0x6, 0x0) 21:01:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x9, @none, 0x8, 0x2}, 0xe) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) 21:01:07 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_SET(r0, 0x6, 0x0) 21:01:07 executing program 5: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) r4 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000100)=""/184) 21:01:07 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) recvfrom$ax25(r0, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) socket$inet6(0xa, 0x0, 0x2) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:07 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:08 executing program 5: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) r4 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000100)=""/184) 21:01:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0xca}}, 0x10) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:08 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x401}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000a00), 0x13f, 0x1}}, 0x20) r6 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x40, 0x12001) sendmsg$qrtr(r6, &(0x7f00000009c0)={&(0x7f0000000280)={0x2a, 0xffffffff, 0x8000}, 0xc, &(0x7f0000000800)=[{&(0x7f0000000300)="1f4b5a26ea1a0967f167b6074ed1fb043fe886742abc797e9e1f7bf5aa7969dea04bb23595f1402e2cda76e7d0ff58cfdb05b04548296ceaa19e8481f8072e430103d759d148c3cbf80c90ffe1d5f35ce86b076fed299bff1f8e0c6cc2fed3507350e19deafb4a89a5649b9e1b2347214bdd07b3f1feb2a6a22e9337cf2820c339e8f10799931a51fa088f45f733f46e07140e1a1a63fd1b180c9f07c4062aa3c4ce423fcaa0473839ef886dc1ff817a930de2992d4bbdffd44e02643f436ff27a1b9d", 0xc3}, {&(0x7f0000000440)="6a158a74da642e8d7baf6406bca25cc80f8e56c1c509b6a7b616fe0ad33fb03031ecea0ef19e1350705164323f8d412adff787767c966e2970228e2e4b84009b0e2896c9b853635c7f7655008e5e3d5ce996d617871c0e3ab8c5a43b74a5290c21162a3f7e7c5ff8b9003bac548d07f53bc09207972d8a6c6b4d4b3d4cb0e249de2c027c70dd27f6917bfdfa7a43a61fcc722c4fde3cb8d1d02cb8f05678fbed35b5d4b8fe4cb6ccfff07b91180b0294f3b9a1bec59fdac2787fadb3dc6fd3a70fcdb3975e58ce1113c5f2931fb1b8063a1f182013e3e881cae2ceb6f644235c63c39254fd4e20", 0xe7}, {&(0x7f0000000680)="6169c4e8d512573391e9f1c6", 0xc}, {&(0x7f00000006c0)="e720b9250357eec6f5c8d218cdc1e834ac7f6e6224be118dd25b5bdaba2431eb07b27ba8cea8040da6fc767a41daa3669a8e3dec1dfc27ac946065b338aa1a254cab83fad13db6019703a7483da8d7ecb142e9aa36867af3019083431d15da65d05691c13bffde45ab9b0c5ad94bd86bbfdd3180ae5b3f79dc977f8cb3", 0x7d}, {&(0x7f0000000740)="e586f853e94ba8ed82f781282036026c33474151b17845e61a366033b53e41bab0c65821645db086bed9e3562c0eb3d610", 0x31}, {&(0x7f0000000780)="8034746cd3d550ada9c620ab9f3b2ec7adfc43c31f9417a5959e339153845df825994092b16c3718565ffc5514c9caedf1f97bd1332ba91ff5b9dbddb24dd625e46ebf5b82519ec1bf4df3b8dc5d4307afe3209bfc972c870ce94856c9c5276d17020a94", 0x64}], 0x6, &(0x7f0000000880)=[{0xe8, 0x6, 0x81, "6387dbeaa0d1ed189ff21cc195c232a61f25b29b7d3f4805472a69d07db6bd445fe683e8d274372c95b85a8d1c281dfab6d6e5050b878117c967ccdfcb741ef18f7d756ae771aa908acad713341e030f6c9c6d6116118101ef6ac9b17131de8d2b63ea881ea004667f9618c68594132b9f75f873189749a724fb6293c5524d866d7ce4efb39712bdb80fb155b75fc147465cd661ff6466c6797a4b89e58d8d558a971354cd0da18021e64c90bbcfa3370455272b4530020980dd90d10edb6f776c942ddc14404cf077530f430e9410c6eefe8209e6d8c689"}, {0x40, 0x84, 0x1, "3b50eb778c4de3336d754f0943d7da3dbb5ccc61ce62c7047ca19641be12d7470082b4d8f908a79e01b5212e02f2f87c"}], 0x128, 0x20004080}, 0x38) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x4f06958f9b1f9817, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x80, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r7}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:08 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:01:08 executing program 3: mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000d, 0x4000010, 0xffffffffffffffff, 0x5) shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0xa000, 0x40, &(0x7f0000ff6000/0xa000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 21:01:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x6800) 21:01:08 executing program 5: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) r4 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000100)=""/184) 21:01:08 executing program 4: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) r4 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000100)=""/184) 21:01:08 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x170, r0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x200003}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000054}, 0x4c0c0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x15c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x801}, 0x4000) 21:01:08 executing program 5: shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000100)=""/184) 21:01:09 executing program 1: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x412000, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000000c0)={@default, @default}) 21:01:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'veth0_virt_wifi', 0x32, 0x32}, 0x12) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)={@any, 0x3ff, 0x6, 0xfff, 0x3, 0xfff7, "a59ab05eb72401059682b84c87762f8bbae445354b45e3f58721793d8db96d88908dcbe43940ce578ed75654cc17261c84035f5872afb3b92749493c0fd391eb51d43223de2fce68f33887104d1fa483eadd2d4b45159ba25e30d388f5c2559dba50335ec72b27f72b47324447228c39ce324fefc6c345c4bdd794be4d301123"}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:09 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r4, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r6, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x0, 0x60d6abf1, 0x18, @private2, @remote, 0x7cf, 0x80, 0xfffffda7, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000001c0), 0xc, &(0x7f0000001480)={&(0x7f0000000d80)={0x700, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r7}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1ec}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x2, 0x2c, 0xdb, 0x8}, {0x6, 0x1, 0x0, 0xcab}, {0xc733, 0xfd, 0x4, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x1, 0xff, 0x2, 0x5}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x700}, 0x1, 0x0, 0x0, 0x20060008}, 0x8010) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf250a000000080001007063690011000200303030303a30303a31302e30000000000800030001000000080001007063690011000200303030303a30303a31302e30000000000800030002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:09 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = getuid() r1 = getgid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x2, 0xffffffffffffffff, r1, r0, 0xee00, 0x73, 0x1f}, 0xf3f, 0x1, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x5}) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) 21:01:09 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r4, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r6, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x0, 0x60d6abf1, 0x18, @private2, @remote, 0x7cf, 0x80, 0xfffffda7, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000001c0), 0xc, &(0x7f0000001480)={&(0x7f0000000d80)={0x700, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r7}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1ec}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x2, 0x2c, 0xdb, 0x8}, {0x6, 0x1, 0x0, 0xcab}, {0xc733, 0xfd, 0x4, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x1, 0xff, 0x2, 0x5}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x700}, 0x1, 0x0, 0x0, 0x20060008}, 0x8010) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf250a000000080001007063690011000200303030303a30303a31302e30000000000800030001000000080001007063690011000200303030303a30303a31302e30000000000800030002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:09 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) 21:01:09 executing program 3: r0 = shmget$private(0x0, 0x8000, 0x80, &(0x7f0000ff8000/0x8000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_SET(r0, 0x6, 0x0) 21:01:09 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = accept$ax25(r0, &(0x7f0000000080)={{0x3, @bcast}, [@null, @bcast, @rose, @bcast, @rose, @remote, @bcast, @bcast]}, &(0x7f0000000200)=0x48) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) accept4$ax25(r1, &(0x7f0000000140)={{0x3, @netrom}, [@rose, @netrom, @remote, @rose, @rose, @remote, @default, @default]}, &(0x7f00000001c0)=0x48, 0x80800) 21:01:09 executing program 0: getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x200, 0x125000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x13, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 21:01:09 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) recvfrom$ax25(r0, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) socket$inet6(0xa, 0x0, 0x2) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:09 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) recvfrom$ax25(r0, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) socket$inet6(0xa, 0x0, 0x2) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x3, 0x4) accept$ax25(r1, &(0x7f0000000040)={{0x3, @null}, [@default, @null, @remote, @default, @default, @remote, @bcast, @bcast]}, &(0x7f00000000c0)=0x48) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x12, 0x0, &(0x7f0000000400)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x202c00, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x2f, 0x3d, 0x7f, 0xb61, 0x64, @ipv4={[], [], @loopback}, @private2, 0x0, 0x8000, 0x6, 0x8}}) 21:01:09 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) 21:01:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x18, 0x4, 0x1ff) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x85, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40908400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7a}]}, 0xffffffffffffff97}, 0x1, 0x0, 0x0, 0x4880}, 0x20040085) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:09 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2, 0x1) 21:01:09 executing program 3: syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x85, 0x6, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x18, 0x4, 0x20, 0x5}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x3f, 0x3, 0xaa, 0x20, 0x5}, 0x23, &(0x7f0000000080)={0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x6, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "b051da84a18547ac707ba0add29d700f"}]}, 0x6, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x30, &(0x7f0000000100)=@string={0x30, 0x3, "549e0a0f4ab3a4fe636ce194e399db0a34c0be7d59825c1090174b8d49656a24fc0e3aac27dbaa00626a900ad1c2"}}, {0x61, &(0x7f0000000140)=@string={0x61, 0x3, "ea988e9f4dca8b4c84b663515581a1116cee7a1cdebb26d04e68eb31224a3c4e0fa9b6441184f13fb48cc94a29d1c4885ae1dc891deebbbb2b55d18bea1b578f2ffbabe71a440172eec504cb6ff4f44b24136a371121119c2639c76e8bf551"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}, {0xfc, &(0x7f0000000240)=@string={0xfc, 0x3, "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"}}]}) syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xca, 0x0, 0x1}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x3, 0x70, 0x5, 0x10, 0x1f}, 0x20, &(0x7f0000000440)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1, 0x4, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xbc, "9d21751f62bc1396e23a2d42efab4739"}]}, 0x7, [{0xbc, &(0x7f0000000480)=@string={0xbc, 0x3, "70762c5c572f9dbf89d1a58907d87e7244bbf8e311e5a5b9ef9e9bc67b36eeb98553c9182d2864e2c772cef5d0bfd753a9a0cf2d482f4772e766a1c3c65a7907289acc80a31e317a938a6c39d2f52b1ca3a624e2bc1907e26830d5cb8db296c130bdba7bbe2acd163f304f88cd765413ecda0c8b892f1cbb117d3a4ca0fd1a4bcfbca323539a9e218b99513140353887b02ada81009f8d774b6f53c10be903af3f8fb0f74991c55aaf4daa0a3f2553c6520da30fdefd2d88d8b2"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3801}}, {0x3b, &(0x7f0000000640)=@string={0x3b, 0x3, "4d7c99766a6f732abb577e8b8f4b73dbd1ab3838524e837ce29f9e109447d22ded445b4e7d2c1917e648f250b39fbcf398bf140459e5c9d6bd"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x408}}]}) 21:01:09 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="060000fe008b4fb125bf977a020009004107ca33aaf860d30267a199db7d8d844e3763bad394f40eb1c49e6625d267a178d809143e8fa15f5deecee6353f9b823a005ddc3bd3226d78d4062e94c86e77c77380cbe7cc0c00c749e0928ad26e992dbc42a4b2e2b012039f0f046a79c594059b960a43e9d1030e4002a3dcaddd88e54622d429b2fc0b54f8dcbd0b2450f6916abd748711b8f8cde3d19687e53967b3fc1e735e019f2ddc18d28745b66872e8a9f8c89b141f89858bed871a59ea3f577887f6cebddad819295bafaa6392a47150e456d1bf811383533de6496b"], &(0x7f0000000480)=0x10) 21:01:09 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@null, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null]}, 0x48) r1 = accept$ax25(r0, &(0x7f0000000080)={{0x3, @null}, [@rose, @null, @bcast, @remote, @netrom, @remote, @netrom, @netrom]}, &(0x7f0000000100)=0x48) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000140)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56}) 21:01:10 executing program 2: r0 = socket(0x27, 0xc, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@fixed={[], 0x12}, 0x0, 0x1000, 0x20, 0x1, 0x2, "abd0a02c583bb356dd19296fdfba4d2f80ed841cbd1ad39ccb8a1602aa364b4370801c0d3de41a8ef506f3081e67a425d1e6af2fc74ee8cc3ab191258d3d8b394bd84eb9e59c83cf798b7c5bd332653648e8f5c8e5b0034a5bd068a312b0ff02a81fc01052a4c5769861022f911b6439082e855c89ef0acb0ecb853c5f1fda0d"}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x280041, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xdc, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0xdc}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r7, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r9, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000580)={0x784, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x1, 0x1, 0xff, 0x7}, {0x4, 0x7, 0x81, 0x3}, {0x1ff, 0x9, 0x6, 0x5}, {0x0, 0x2, 0x81, 0x7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x784}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) 21:01:10 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:10 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) recvfrom$ax25(r0, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) socket$inet6(0xa, 0x0, 0x2) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:10 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xbc}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008891}, 0x80) 21:01:10 executing program 2: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/87) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x410b00, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0xdc, 0x3f, 0x3, 0x0, 0x8, 0x6, 0x9}, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000000)) 21:01:10 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000100)=0x80) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='c \x00\x00\x00'], 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r7 = socket(0x2c, 0x4, 0x9) recvfrom$ax25(r7, &(0x7f00000003c0)=""/145, 0x91, 0x0, 0x0, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r6, 0x3, {0x0, 0x25f252435927045d}}, 0x18, &(0x7f0000000240)={&(0x7f0000000180)="128063062b82fe4fd3b96b0b7df9689b679b8806bfa04a59cf6a685141a2d647626eafe0e9bfc0dbe716f94a07662be6358af4f8c73ea86b26c5e76e681a4fc6b3cc5a312bed3a1db1be3a7512123298136f38ef1783421b7aa6aeda8257f31bffd89a1a9755e35494bff3da39338b8deed2138af77ea3181a46bfb0a00e1c29532881ad97e640eea19f85cc76efa91d999feefd1aefca41f78693b5cc779f3ab5aeee29ab8d0bc2bcb2cfb52d9eda3bd3a24fa4", 0xb4}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) 21:01:10 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 21:01:10 executing program 3: r0 = shmget$private(0x0, 0xc00000, 0x2c00180c, &(0x7f00003fe000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) 21:01:10 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000003540)={'syztnl2\x00', &(0x7f00000034c0)={'syztnl0\x00', 0x0, 0x29, 0x1f, 0x3f, 0x32, 0x12, @private2={0xfc, 0x2, [], 0x1}, @remote, 0x7, 0x700, 0x5, 0xfffffffb}}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x24, 0x0, &(0x7f0000000400)=0x4) bind$can_j1939(r1, &(0x7f0000003580)={0x1d, r2, 0x0, {0x0, 0xf0}, 0x1}, 0x18) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x800, 0x4) 21:01:10 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x5, [0x8b7, 0x0, 0x3, 0x6a73, 0x2]}, &(0x7f0000000100)=0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x7ff, 0x6, 0x1, 0x0, 0x7, 0x3f, 0x4}, 0xc) 21:01:10 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) sendto$ax25(r0, &(0x7f0000000080)="675df22ffa06350c4a10b0c3ff8f4322dfdb7f20bc1f0dd90524d56155cc7241c65149a0db52f09cd5eff7e8b7977d9b44772cb0a758871e79234dbe2a45996da110ac1b5b5f7e8b8cb63eadab5711ef3c37cf763e10daca27681dfa46aee04ccd6e433dd1c543acd9ef1981a2122b8911690ec30d5d22555990b4e8d4433bc45ff99a3b6098d927bd72b87ce28ecee15080fc126828ede059c37a828b7744a3b03281a9f4ab7c590e92156903b376de0917be039ce0378e019fdfc412a08870b318acb98187f003a6b1dca0b9f42b6ad7dc8c857671f814b5eef478d6d040c23d03b0191f4c94", 0xe7, 0x4000041, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3}, [@default, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@null, @null, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:10 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x19, 0x0, &(0x7f0000000400)=0x4) 21:01:10 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = getgid() r1 = geteuid() r2 = getgid() r3 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2, 0x0, r0, r1, r2, 0xc0, 0x1}, 0x4, 0x1c2, 0x7, 0x5, r3, 0x0, 0x5}) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000100)=""/248) shmctl$SHM_LOCK(0x0, 0xb) 21:01:10 executing program 0: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:11 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) recvfrom$ax25(r0, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) socket$inet6(0xa, 0x0, 0x2) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0xfffffffffffffec8) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x106, 0x5}}, 0x20) 21:01:11 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:01:11 executing program 3: shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_SET(r0, 0x6, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x3d, 0x12, {0x12, 0x15, "5c83c8d24e147ed8e3210365d9d715a4"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}}, &(0x7f0000000300)={0x34, &(0x7f00000000c0)={0x0, 0x7, 0x5, "7c817d3479"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000180)=ANY=[@ANYBLOB="2000ed00000000eb6b2a37c128ea6b9f08ea7f4cd8b0b2bd4d1eb894ce7451ada8499f00e2c669280f3a7b24abe10500c03e9048691b42d24e6bf065433602d17baadcd986398f1e41191af8dcc13bdbab67ea44083e7e327545f32d8b934f2bb9ae3b1c5e175434ef493859185378c26bf28b280a0de4ac597682b476731ced165a51413f2a2031515ba15b10ccd15aeaff89f3c6a20cf14fe128b30d8775889d274702dd07d5bc6b7d80f5b3dbb0470ee607901db79bee9d5b6b85c2aeeca72afba1c436217cc14b00686bac8adde1bf4c349646fcf07fb288831d4a4e7214bcd7f7ea"], &(0x7f0000000280)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0x7}}) 21:01:11 executing program 1: syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @default}, [@default, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 21:01:11 executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x4, 0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2440, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x13, 0x0, &(0x7f0000000400)) 21:01:11 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x148, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x20}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf2}, {0x6, 0x16, 0x80}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x78a8fae2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x7d3}, {0x6, 0x16, 0x20}, {0x5}, {0x6, 0x11, 0x3ff}, {0x8, 0xb, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x200}, {0x5}, {0x6, 0x11, 0x1ff}, {0x8, 0xb, 0x6d53}}]}, 0x148}}, 0x4004100) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r5, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r0}, 0x8) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r6, r7, 0x20}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x40010) bind$ax25(r1, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:11 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:01:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48084}, 0x4811) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) write$fb(r1, &(0x7f0000000440)="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", 0x1000) 21:01:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$l2tp(0x2, 0x3, 0x73) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffffe}}}]}}]}, 0x58}}, 0x80080) 21:01:11 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:01:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x86, 0x4) 21:01:12 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) recvfrom$ax25(r0, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:12 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x8402, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000000c0)={0x80d3, &(0x7f00000002c0)="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"}) recvfrom$ax25(r1, &(0x7f0000000200)=""/159, 0x9f, 0x100, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:01:12 executing program 0: getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) 21:01:12 executing program 5: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:01:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000000)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={r1, r2, 0x100, 0xe7, &(0x7f0000000040)="b93e7eecb392b3d50f70641371d17d1a83139a300c1c4ea375dc2dab69d3f80d7011510a27df4b29c7eca3cdc600a67ce2484abf2d1aee1e9dbc6f2ca58ff5ed72fd88308a99519dd19d7fab4965318ca56ddfc3bfbde3274dd42895a0fa20bb1c495cb126f60a4502c405f7879eb69982926e4c210c9bfe22ed6dadf30c92c8f9ff5d578a7c97bbd9ef706cdacafe08fbd19a56eb9c8f31197517ff79ff0be16327d7610906c9c3cb6675c9929cdc7c6635aa6daccb1ecd5bcedd9c0eeb9d7688c8e2ff06ebec61d015cc42103c4dc6d11ba8cd2ae847746ff93b09de6e2f5f09aad96e0c3852", 0x1, 0x4, 0x194a, 0x24, 0x3, 0x3, 0x8, 'syz0\x00'}) 21:01:12 executing program 3: ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x8001, 0x0, "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"}) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:12 executing program 5: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:01:12 executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3ff, @none, 0x3dc, 0x1}, 0xe) r0 = socket$inet_sctp(0x2, 0x1, 0x84) select(0x40, &(0x7f0000000040)={0x80, 0x3, 0x23, 0x4, 0x5, 0x100, 0x6, 0x6}, &(0x7f0000000080)={0x6, 0x401, 0x10001, 0x7, 0x81, 0xeb23, 0x7fff}, &(0x7f00000000c0)={0x8, 0xffffffffffffffff, 0xffff, 0x4, 0x0, 0x1000, 0x3ff, 0x2}, &(0x7f0000000100)={0x77359400}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r4, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8001) 21:01:12 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) shmctl$IPC_SET(0x0, 0x6, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/52) 21:01:12 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/109, 0x6d, 0x10000, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)={0x5, [0xcd8, 0xfff, 0x8001, 0xfff, 0xff]}, &(0x7f0000000180)=0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000040)={r2, r0, 0xdee, 0x14, &(0x7f0000000000)="aac8a052ab7a996740f36651706a876950a0c499", 0x1, 0x8, 0x7, 0x5, 0xff, 0x2, 0xfff, 'syz0\x00'}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x2040, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x40, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 21:01:12 executing program 5: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:01:13 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:13 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400100, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) sendto$ax25(r2, &(0x7f00000001c0)="d25a5097991b856ce7be5c38603a40f6fb3ba032b7fbff5f9f89596e50ff74719c960a457f1b1c7bdda3c6a55aa2793973661d81d0a14a293f8d56800b37523553ca60c9a9d871e71b61f06ceaddc36946a4a47d0f9633be371d3f4e52ab4484e0d9122e3c6813ed40379cc4692fa39c2c95bb75ee3e36b4ac57ff691f4d45c1e172afbb8b9222fb1ad797a5ae8bf3e1cf1bf49984441fd17a57fb93a6de01b03773f92d340238bc444d53ef9fea65266fac7c7d40c266b8f19ca893c591aeeb93c47e0b0cafeb2ba8dafaaf", 0xcc, 0x18080, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r3, 0x4}}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r5, r4}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r5, 0x6}}, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:13 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x80) 21:01:13 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:13 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:01:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockname(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:13 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) accept$ax25(r1, &(0x7f0000000080)={{0x3, @bcast}, [@rose, @rose, @netrom, @netrom, @null, @default, @remote, @netrom]}, &(0x7f0000000100)=0x48) 21:01:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x400, 0x82180) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) 21:01:13 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28000, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x32}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000810}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x12, 0x0, &(0x7f0000000000)) 21:01:13 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_SET(r1, 0x6, 0x0) 21:01:13 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:13 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:01:13 executing program 1: ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={r0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)={r2}) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) bind$ax25(r3, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) syz_init_net_socket$ax25(0x3, 0x3, 0x6) 21:01:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:01:13 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:13 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:01:13 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:13 executing program 2: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000000c0)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x8000, 0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) 21:01:13 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) sendto$ax25(r0, &(0x7f0000000140)="8d7cef4424e7212db134e84227cae521155ca40a51cfb6a93bade58551ae834eee904807bd7d7fba8bf7cd42ba028d316592ca6d6cf6c3904104161a0ad5a3d26c05797b1463ef337cb5561b4143017fb927333b0b9774119c9bc3407b194493b1a1b5de860596a6d5f9dc4d379d0f02df84030c123d09c137af9460b14a2c6a70b8a0069d4b003fa97383cb3dcba897377a4a220a82003b2cc798927d40f5e7c921568789c85d34ae934b8d47df01ec9bc3", 0xb2, 0x10, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0x3, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x40480, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)) 21:01:13 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r1, 0x8000000) shmctl$IPC_SET(r0, 0x6, 0x0) r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_LOCK(r2, 0xb) 21:01:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:13 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:01:13 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x7ff, 0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) 21:01:14 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)={'veth0_to_bridge', 0x32, 0x34}, 0x12) 21:01:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10}, 0x18) 21:01:14 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:01:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004884}, 0x1081) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000006000100000000001400080076656ffcf9ec4cdd84140000000000000c001000"/62], 0x44}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3b}, @L2TP_ATTR_DEBUG={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x400a4) 21:01:14 executing program 2: mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x1010, 0xffffffffffffffff, 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) 21:01:14 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) bind$ax25(r1, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null]}, 0x48) [ 1497.569280][T27907] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 21:01:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x44}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0xb, 0x1, 0xa4) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x13, 0x0, &(0x7f0000000400)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) write$smackfs_ipv6host(r3, &(0x7f0000000240)=@l2={{0xffffffff, 0x3a, 0x4, 0x3a, 0x8, 0x3a, 0x80000001, 0x3a, 0x0, 0x3a, 0x8000, 0x3a, 0x4, 0x3a, 0x2}, 0x2f, 0x1, 0x20, 'l2tp\x00'}, 0xb3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r5, r4}}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r5, r6}}, 0x18) 21:01:14 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x10) 21:01:14 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/sysvipc/shm\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x12, 0x0, &(0x7f0000000000)) 21:01:14 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@mcast2, @in6=@private0}}, {{@in6=@mcast1}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:14 executing program 4: recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:14 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@remote, @netrom, @netrom, @bcast, @null, @remote, @netrom, @bcast]}, &(0x7f0000000140)=0x48) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) sendto$ax25(r1, &(0x7f0000000100)="e5b313f45ddba574838d5909927b89e68211148e", 0x14, 0x48000, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 21:01:14 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:01:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x88, 0x0, 0x3ff]}, &(0x7f0000000040)=0xa) 21:01:14 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_SET(r0, 0x6, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/150) 21:01:14 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000040)) 21:01:15 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:01:15 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$smackfs_label(r1, &(0x7f0000000000)={'\xe7]\x00]-].:$^'}, 0xb) 21:01:15 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002fc0)={'team0\x00', 0x0}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r6, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r8, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8010000", @ANYRES16=0x0, @ANYBLOB="04002abd7000fcdbdf250000000008000100d898c3721926eb03459c7f3163b3498f76b72e50efefc0506b5cb4fb7375f6fb8d39e045edb3bd5ea13f97d9d86c9897f06dde7d9619f6bfdd2a6f7f5a38ece6b96e2ac11051d9da71e2ebeea83a49a8d204d77cc4d1209a7c0acdc82923c638b377d1447bd760309ff25220d5c9b33a948cccb4807da2e337b5b14176fc05fe8e83cf5a4a6f0b733f0f6ba7ce535b68e70eb0ff70ac3d81432afd", @ANYRES32=0x0, @ANYBLOB="fc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400050b000008000600", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000008000100", @ANYRES32=r7, @ANYBLOB="c800028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000003140)={'sit0\x00', &(0x7f00000030c0)={'sit0\x00', 0x0, 0x29, 0x8, 0xa0, 0x15, 0x62, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private1, 0x8000, 0x10, 0x5, 0xbd}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003500)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003e80)={&(0x7f0000003540)={0x924, 0x0, 0x318, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1c8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xf5d}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0xfff8, 0x1, 0x7, 0x101}, {0xffc0, 0x5, 0x9, 0xff}, {0xc000, 0x14, 0x40, 0x1}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7f5d}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x44, 0x4, [{0x1, 0x7f, 0x8b, 0xf87}, {0x0, 0x3, 0x1, 0x401}, {0x4, 0xb, 0x40, 0xd6}, {0x4, 0xff, 0x81, 0xa591}, {0x1, 0x5, 0xdb, 0x800}, {0x2, 0x3, 0x0, 0x10001}, {0x7, 0x2, 0x1, 0xf1c9}, {0x4, 0xd5, 0x0, 0x80000001}]}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x81}}}]}}]}, 0x924}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r13, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:15 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000000)=""/47) 21:01:15 executing program 4: recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:15 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:01:15 executing program 1: syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="d40000004ecbf292ae830ba3b8ddf6e7ce246af41370dfe934e7f05b9d7afe3629334a9d3f391ac8963e940690f3ba9de8126b1c226729628c8b498482f0bef97685e3010f5efa5793035115cb4d95b246dc1d3a0000000000002c73afad37", @ANYRES16=0x0, @ANYBLOB="020028bd7000fbdbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000080001007063690011000200303030303a30303a31302e30000000000800030000000000080001007063690011000200303030303a30303a31302e300000000008000300000000000e0001006e657464657673696d0000001f0002006e657464657673696d30000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20044812}, 0x4800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vcs\x00', 0x20300, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000680)={0x9, 0x3, "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"}) bind$ax25(r3, &(0x7f0000000380)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf4, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xe0c}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x240000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@null, @null, @default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x4}, 0x10) connect$bt_l2cap(r5, &(0x7f0000000600)={0x1f, 0x8, @any, 0x4, 0x3}, 0xe) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000540)={0x60, 0x640, 0x0, 0x1420, 0x7fff, 0x1, 0x4, 0x1, {0x4, 0x800, 0x1}, {0x401, 0x6, 0x1}, {0x5, 0xfffffff8}, {0x2, 0x6, 0x1}, 0x1, 0x10, 0x68, 0x7, 0x1, 0x1, 0x400, 0x0, 0x6, 0x8, 0x6, 0x28000, 0x0, 0x4, 0x2, 0x2}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r6, 0x0, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f00000008c0)={0x20, 0x2, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0]}) 21:01:15 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x20004000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002500)='/dev/autofs\x00', 0x222380, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x13, 0x0, &(0x7f0000000000)) 21:01:15 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x280000, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000080)) 21:01:15 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_SET(r0, 0x6, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/150) 21:01:15 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 21:01:15 executing program 4: recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:15 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:15 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x40000, 0x0) 21:01:15 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x100000000, 0x301000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000100)=0x80) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x24100) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x14008840) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:15 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) recvfrom$ax25(r0, &(0x7f0000000000)=""/255, 0xff, 0x40000102, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) accept$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@bcast, @remote, @remote, @default, @null, @default, @remote, @default]}, &(0x7f00000001c0)=0x48) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:15 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:15 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:15 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) recvfrom$ax25(r0, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:15 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x48801) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r1, 0x4) 21:01:15 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x100000000, 0x301000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000100)=0x80) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x24100) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x14008840) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:15 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) recvfrom$ax25(r0, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:15 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001280)='/dev/hwrng\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000001140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xc}}, 0x10) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/225) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000011c0)={0x16, 0x98, 0xfa00, {&(0x7f0000001180), 0x2, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e24, @multicast2}}}, 0xa0) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000100)=""/4096) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000001480)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001440)={&(0x7f00000014c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:15 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/78, 0x4e, 0x21, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) socket$bt_hidp(0x1f, 0x3, 0x6) 21:01:16 executing program 2: recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000380)=[{&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000000180)=""/237, 0xed}, {&(0x7f0000000280)=""/248, 0xf8}], 0x5, 0x0, 0x0, 0x40002120}, 0x38, 0x12000) syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00') getrusage(0x0, &(0x7f0000000480)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:16 executing program 5: syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="d40000004ecbf292ae830ba3b8ddf6e7ce246af41370dfe934e7f05b9d7afe3629334a9d3f391ac8963e940690f3ba9de8126b1c226729628c8b498482f0bef97685e3010f5efa5793035115cb4d95b246dc1d3a0000000000002c73afad37", @ANYRES16=0x0, @ANYBLOB="020028bd7000fbdbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000080001007063690011000200303030303a30303a31302e30000000000800030000000000080001007063690011000200303030303a30303a31302e300000000008000300000000000e0001006e657464657673696d0000001f0002006e657464657673696d30000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20044812}, 0x4800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vcs\x00', 0x20300, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000680)={0x9, 0x3, "627946e3178e29cc078e0722b27196f062289824a99f69f47c30342e63e1d4681758c6cc4fac60e213538d20cd1ea7e0c5afc1229e117aed2f652b8ceb0c23b4316415897e2c96f4082424548369f27b954ba5234c7f498d725cc8403acaed0b6a858288366cd830bee7124c1401de8ef59e0d6ff2f8d366a44191e0f23470ed9cd209b8450dfa9bc4fa73146e67e64bfa5a9f8711ce3bf829d94512e072d073ec625b9f2996efa522a275fbdad8ab554ba984c229fd8a87440cbbb5a744e336f2505aef0f870f4db61eafa7f6a04c4a1fde9e5e76e33273d51e5787a8704a19a5937934b62eafaea813865215143302cc9aca40a2199cd165927cfb297d390c"}) bind$ax25(r3, &(0x7f0000000380)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf4, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xe0c}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x240000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@null, @null, @default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x4}, 0x10) connect$bt_l2cap(r5, &(0x7f0000000600)={0x1f, 0x8, @any, 0x4, 0x3}, 0xe) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000540)={0x60, 0x640, 0x0, 0x1420, 0x7fff, 0x1, 0x4, 0x1, {0x4, 0x800, 0x1}, {0x401, 0x6, 0x1}, {0x5, 0xfffffff8}, {0x2, 0x6, 0x1}, 0x1, 0x10, 0x68, 0x7, 0x1, 0x1, 0x400, 0x0, 0x6, 0x8, 0x6, 0x28000, 0x0, 0x4, 0x2, 0x2}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r6, 0x0, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f00000008c0)={0x20, 0x2, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0]}) 21:01:16 executing program 3: syz_init_net_socket$ax25(0x3, 0x5, 0x8) 21:01:16 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) recvfrom$ax25(r0, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:16 executing program 1: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x810, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x31712, 0x0, 0x0, 0x1}, 0x6d) pselect6(0x40, &(0x7f0000000080)={0xd, 0x8001, 0x4, 0x40, 0xffffffff, 0x24, 0x2, 0x1f}, &(0x7f00000000c0)={0x77f5079, 0x80000000, 0x5, 0x80000001, 0x2, 0x4, 0x8, 0x20}, &(0x7f0000000100)={0x4, 0x0, 0x7, 0x42, 0x5, 0x20, 0xfffffffffeffff80, 0x9bcd}, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x1f]}, 0x8}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000240)=0x80, &(0x7f0000000280)=@can, 0x0, 0x80800}, 0x0) r4 = socket(0x27, 0x1, 0xdc) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@qipcrtr, 0x80, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/61, 0x3d}], 0x1, &(0x7f0000000440)=""/194, 0xc2}, 0x0, 0x12142, 0x0, {0x2}}, 0x3) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:16 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/meminfo\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000100)={0x60, 0x2a, 0x40, 0xa82, 0xf2, 0xfffffff9, &(0x7f0000000000)="72982586435b7a8bb0744943280be780218d955823b98d526fa49ba1fed04b5136c3a3dcec0dbb64a173898e1233aa094356edc31a00f95234e35419570f7ec6e8c60bb0a31317a8850173ae1177639dace9cf082e5d5d7b6add09d4e474bb019ced9cf42502d14743437fa2d83b0cb327eaf3411d4cc87f459adadeb8ff9463995aca62bd4dabeb0c34762c5e1e6b0e7e0ae99ddb8f34321c119e5b8572e770e749d83e2d3eb3d52247c87e895e020ee763601da3d1de1771fdfe88617b3cf7823ec60f895a270c8ac59d7f8649a7e95465046c513b1ba7c5eac427e682138e2875650295ed6d080d613273f5ca7f193f95"}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gretap0\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000005) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x884) 21:01:16 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_SET(r0, 0x6, 0x0) shmctl$SHM_LOCK(r0, 0xb) 21:01:16 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) write$smackfs_logging(r2, &(0x7f00000000c0)=0x2, 0x14) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:16 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x8) 21:01:16 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:16 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x84040, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x40, 0x40, 0x70, @private2, @mcast1, 0x700, 0x40, 0xffffffff, 0x40}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r4, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r6, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x8, 0x8, 0x0, @mcast1, @local, 0x7800, 0x700, 0x1, 0xa1ba}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000440)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000480)={0x4a8, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xb7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r2}, {0x188, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x94b8, 0x2d, 0x7, 0x9}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x48090}, 0x20000080) 21:01:16 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) 21:01:16 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x8) 21:01:16 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x46d00, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x80, 0x258, 0x800, 0x1e0, 0x7e3, 0x1, 0x8, 0x0, {0x9, 0x1fb}, {0x9, 0x1ff}, {0x2, 0xa6, 0x1}, {0x0, 0xc597}, 0x1, 0x100, 0xffff, 0x2, 0x1, 0x40, 0x40000005, 0x4, 0x1000, 0x6, 0x1c, 0x6, 0x10, 0x4, 0x0, 0x6}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r2, 0x4) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x6c, r3, 0x100, 0x7fffffff, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_batadv\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xae}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffff7e03}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008005) ioctl$FBIOBLANK(r2, 0x4611, 0x3) 21:01:16 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000180)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r5, 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0xcf, 0x400) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20040410}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r1}, {0x8, 0x1, r6}, {0x8, 0x1, r1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x811}, 0x10080) sendto$ax25(r2, &(0x7f00000001c0)="3853e4e4f6cc4b3c5a272e0c8aef8b9f0545922486f52db4b14d99befc17a0de3bee49e73015a030dd77e50d1a1dfba9", 0x30, 0x20000, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/timers\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000480), 0x4) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}]}, 0xa0}}, 0x4040) accept$ax25(r0, &(0x7f0000000080)={{0x3, @bcast}, [@null, @rose, @null, @remote, @remote, @default, @null, @netrom]}, &(0x7f0000000100)=0x48) 21:01:16 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x30, 0x4) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:16 executing program 2: socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:16 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:16 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x8) 21:01:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000080)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000000c0)=[{0x0, 0x2, {0x2, 0xff, 0x71b81590ba549fe0}, {0x0, 0x1}, 0xfd, 0xfd}, {0x2, 0x0, {0x1, 0xf0, 0x4}, {0x2, 0xf0, 0x2}, 0xfa, 0xfc}], 0x40) 21:01:16 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r1 = socket(0x27, 0x3, 0x1) sendto$ax25(r1, &(0x7f0000000080)="8069a4f0d5f8e43d2a767c3f1c76954a004975b123771aafdd428290a9fb99eb2774f17fba27b00cc3d960afb314a1c43a456c2da1180aec660bbbd150309541c517bb3ac97167b40b8fd3c3f182a52a5af2e612806ee84a43632f158df7aa5fdc025e2f36876c082c914ea419a70a661921b0ef598e022100ca966ce9b64eb152215de980537ceaa28fd11af73ac2c1739736dccba76d5b6fb2a3a0a1428ee6c44b6831adc71fccdb07228fe02b1d1d185dce2a9389ec8756d4b71b05415618dc8bfa43c89ce0b96763fc73f999f87c8cd19b645327bcf06c23a3eeb5107b7c0cc5f0407282587d", 0xe8, 0x4000841, &(0x7f0000000180)={{0x3, @bcast, 0x1}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) 21:01:16 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) r1 = shmget$private(0x0, 0x7000, 0x1010, &(0x7f0000ff9000/0x7000)=nil) shmctl$IPC_SET(r1, 0x6, 0x0) 21:01:17 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:17 executing program 5: syz_init_net_socket$ax25(0x3, 0x0, 0x8) 21:01:17 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, r1, 0x8000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf25020000000c00050020000000000000000c00020000080000000000000c000800000000000000000008000100000000000c00060003000000000000000c00050008000000000000000c0004007e070000000000000c00060002000000000000008cd9be49e8cb788ed5ad0020a14508f56b4b791d87867b260e7e92d468a88e5788129b7789f02cd24da6271339243ee222fa970eda"], 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x10010, r1, 0x8000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f0000000140)=0x1, 0x0, 0x4) 21:01:17 executing program 1: syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @default}, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:17 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x200001) shmctl$IPC_SET(0x0, 0x6, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) r0 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) r1 = getgid() r2 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, r1, 0x100, 0x1}, 0x96, 0x7fffffff, 0x40, 0x2, 0x0, r2, 0x7fff}) syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x241c1) 21:01:17 executing program 5: syz_init_net_socket$ax25(0x3, 0x0, 0x8) 21:01:17 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:17 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20}, {0xa, 0x4e20, 0x3, @empty, 0x5}, r1, 0xffff}}, 0x48) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:17 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x101, @none, 0x33c0, 0xd634b951794b6acf}, 0xe) 21:01:17 executing program 5: syz_init_net_socket$ax25(0x3, 0x0, 0x8) 21:01:17 executing program 3: sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e46989b9a0aa925d19f9e45934ee2e04c21fa57b5fbd6e86b99054f249010000800000000034a67e4b7545c260a3b5f9fe21d2d83bb61aa130fedf8dbd08994fe6f8e479a0b464303d848bcb3b65701cec1e42d87f911a0dc9811f7066215770ad79d822f5e1fcfe0ee52f03784ccc8d9bb515c492db83ea9727010cc8be3d7cc3307ee7c4c1e37216d3d69f1973b4cdcfc9622a306d12da1e1ddd9e8500"/172, @ANYRES16=0x0, @ANYBLOB="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"], 0x19c}}, 0x4000800) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:17 executing program 2: connect$can_j1939(0xffffffffffffffff, &(0x7f00000007c0)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x1}}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000180)=ANY=[], 0x9) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x4000, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000440)='/dev/bus/usb/00#/00#\x00', 0x8, 0x2002) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000640)=ANY=[@ANYBLOB="4a7400000900000000828387858d8f020a41d2cdf45d7ec0c36d4716232e6ba34d0ae7ce0ba8e0ab8c1a649ab72961c33aed6d330fc9d8a25addcf9e6a27251137a9f42676f36be841def9f9cddb9db54fb4fb5e5d33e2ad05882f2942ff9061d2c226441cce607a9f2ab064abc5cb2964b8b45e2360c3d10965de5d82aaff561f96456d7734ab1a4bc7098345d204d77c5ffb925c988bd247f61178ad83a73777159aa000cd0b310bc16da25e85f0a0c298f32ebb366e2738d3634e7dd285c0ca21414be0a93cf37c73cb9637fdac5d47e0292b16527d4941e5c2895b0cc4e0472c1c25533ea3a0f298fd60e2b548d31f8bda20877b928e8b4bbb9cb30c2704b2cc9d748e849d15dfb9ac6baca7a042295fe0589fa0f9c8a3187c19d9498b629e956fba0edc52ca1a66402bc0a6a70fea0cadc012984bd27756ae47caec7823a0c6914362c6030ad922b10975350f8872afd83a9fd57ae12892c15a0fb3998f8464f53dfb1bb4c99a35ba42c9a19e05eee3856acd3d2620"]) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendto$ax25(r1, &(0x7f0000000180)="7bd75d232313b818238505bc14f4eb7a578a7bb98cce1525943ac18d7fb0554a6128167cf87c19a2b62c8b5ffc18badc1d522a9bfb6cc36045b1a2293450526e8c77b8cd5b087c190bedcf17a6534d12310c2a2b806b5ff4531d40fe9ec58f94a18173509be31ad5f65624fe4a8308205942c74ed995b6896b7d5a7e772cd51bebd8f0a7841114df41dbf54b9f4739fcb37fb409fc051eac76d487805269de9312db520cb374a1803c192fdbf4eafd4eec855abfc20f0fdfd985d8916f2f9d26ab1750fccdac227fee05a2c6c5d2c36dc049e3ef4aa98e934f898145b9338824d0a54d82ff87ca3b78604b9e8420c0f0", 0xf0, 0xc000000, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r4, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004040) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000480)=0x37) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r5, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xac, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x90}, 0x4003) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 21:01:17 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket(0x6, 0x80000, 0x101) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 21:01:18 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) 21:01:18 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x24000, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000300)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x88d641418e76aacc, 0x84) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000000c0)={r1, r2, 0x7f, 0xa3, &(0x7f0000000000)="7a3f9b0b0074ce6417148886e17f25315193838ef91cec5fb71bdcb9dd06fecf986bef3dd5cd83122db668f865c7c1377eca20e264c36ec578255ef42fe305b9a2b4981deff2f7d534d23de6f2b8846692d69ceb28925c19327f346693532ba1faf098381eedef131df633c59d8123ae4f280295c58231e4bf3d9e8d21111a8554302f1296f7e8d258ec712145b1a9c536072306fae83723f7df9b3dea427573499cc4", 0x1, 0xf9, 0x6662, 0x40, 0x0, 0x2, 0x431c, 'syz0\x00'}) r3 = syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x2, 0x521001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000000280)) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000180)={0x190, 0x400, 0x190, 0xdd0, 0x8, 0x9, 0x10, 0x0, {0x8, 0x5, 0x1}, {0x955, 0x1db5}, {0xff, 0x100, 0x1}, {0xffff, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1f, 0x0, 0x2, 0xff, 0x1000, 0xffffffc0, 0x10, 0x4, 0x1, 0xa}) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x13, 0x0, &(0x7f0000000400)) 21:01:18 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:18 executing program 1: bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x81) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_SET(r2, 0x6, 0x0) 21:01:18 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000040)={0x12, 0x10}, 0x18) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:18 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x10010, 0xffffffffffffffff, 0x100000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000005, 0x810, 0xffffffffffffffff, 0xfffffffffffff896) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x56}) 21:01:18 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x3, [0x4, 0x401, 0x6]}, &(0x7f0000000080)=0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000100)={{r2, r3+60000000}, {0x0, 0x3938700}}, &(0x7f0000000140)) 21:01:18 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) 21:01:18 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) recvfrom$ax25(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x160, &(0x7f0000001080)={{0x3, @default, 0x7}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 21:01:18 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) 21:01:18 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffc}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008}, 0x8080) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x68000, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x80) 21:01:18 executing program 0: r0 = socket$inet_sctp(0x2, 0xbb1630709f02bdc4, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:18 executing program 1: syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x0, 0xb7, {0xb7, 0x24, "3bd03b54383cf6a31878f261740ab8b57a6b9ef0539edfb4b037454558389c6d466ba96d9e46cfbca9a781a3c4550d3d1cc2f6058dd359dbdaffbdddefd34db27de9dbff8d8621c6281bb819bcc3bf61a69fa8d91c16bac0d3274b0754890f974317cc2186da79ad6bf45f8bdb02a82bf175c70475130da18bc0cbec4185d5ddf36735d5d9e7545ed8c72379778051d681e5aaaef07a5580b222491ece75f2262e47ea960a4b6bfeaa129099ce9e90423bef247ea0"}}, &(0x7f0000000140)={0x0, 0x3, 0x8, @string={0x8, 0x3, "18fd3eeaa81c"}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x6, 0x67, "9b74a56c85d1941a8d7ef81a6c5e233af9a78037f430459e9f2375eec9510c6b4b0f2d9c6f955e9ef2f46757a2964c24526f319f1ab74742246e5807c443d5ea5969dab7f7d5e532993e22f2b7599ec3110c013acd344756c2320e7a9628ce6eecc8cb9200ed2b"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xc0}, &(0x7f00000002c0)={0x20, 0x0, 0xe6, {0xe4, "e49ed0ec4e3995514718e590183a05b85c457d2ef94fc4213b00642584c98a68e0e08a302a18a095c710c117c999310bcec67dc973ce54cd583e1399cb627b34e9f86e6b1b365a7ad37d9a22df84eba6999a858a38c2a418c56ddad1a3cee5f78258042918be97dc454ccd173c3d3e5f5b3e620a850bc7a80b7fc645a2bf57ffc189125a8f6715ef1590d015abe20f3ac10f39d5465df483ed756613ad560a95929156f42440b2e1afca81da25172441bb4b94ce055e5896bb8dea39c0c1bc5d34d1027cd0373bffe335e62964afcfce99b15f5a30997bf4db628464971289d244a87bc4"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x20}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x7}}) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000480)=""/250) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:19 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:19 executing program 5: syz_init_net_socket$ax25(0x3, 0x5, 0x0) 21:01:19 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x1) shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x1000, 0x4) 21:01:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'a', ' *:* ', 'r\x00'}, 0x8) 21:01:19 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffff}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x1d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) recvfrom$ax25(r1, &(0x7f00000001c0)=""/84, 0x54, 0x2001, &(0x7f0000000240)={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1e8, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x20}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0x81}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1000}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0xd7b}, {0x8, 0xb, 0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x20}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x101}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x101}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x69}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40014}, 0x880) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)=0x1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) recvfrom$ax25(r0, &(0x7f0000000080)=""/119, 0x77, 0x0, 0x0, 0x0) 21:01:19 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x9000)=nil, 0x0) 21:01:19 executing program 2: shmctl$SHM_UNLOCK(0x0, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4004004) 21:01:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x81) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_SET(r2, 0x6, 0x0) 21:01:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x8000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r0, 0x0, &(0x7f0000000000)="3755d6243156718288ef8a15e1f98bd6f4ebaaa963d38eea4a727c227e895a5303de933d07b3de", 0x27}, 0x40) 21:01:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x81) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_SET(r2, 0x6, 0x0) 21:01:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x300}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 21:01:20 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) socket(0x22, 0x6, 0xb3ef) 21:01:20 executing program 3: shmctl$IPC_SET(0xffffffffffffffff, 0x6, 0x0) r0 = getuid() r1 = getgid() r2 = getpid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x1, 0xffffffffffffffff, 0xee01, r0, r1, 0x103, 0x6}, 0x5, 0x8, 0x6, 0x7fff, r2, 0xffffffffffffffff, 0x4}) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/160) r3 = io_uring_setup(0x3b7, &(0x7f0000000180)={0x0, 0xbca0, 0x1, 0x3, 0x247}) io_uring_setup(0x35dc, &(0x7f0000000200)={0x0, 0xa371, 0x2, 0x2, 0x2f3, 0x0, r3}) 21:01:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x81) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_SET(r2, 0x6, 0x0) 21:01:20 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0xff, 0x3, 0x2, @private2, @private2, 0x700, 0x7800, 0x8000004, 0x2019}}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:20 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000380)={0x8000, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0]}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48084) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) bind$ax25(r0, &(0x7f0000000080)={{0x2, @bcast, 0xfffffffc}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0xc}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x81) shmctl$IPC_RMID(r2, 0x0) 21:01:20 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/16) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/4096) 21:01:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r2, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r6, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r8, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000023c0)={&(0x7f0000001ac0)={0x8c8, 0x0, 0xc00, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2f}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x438}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9a3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x51}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x6, 0x5, 0x7f, 0x7fff}, {0x1000, 0xff, 0x4, 0xfd}, {0x5, 0xcd, 0xee, 0x4999}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfffff48b}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x114, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x2, 0x7f, 0x81, 0x72be}, {0x9, 0x4, 0x1f, 0x1}, {0x1, 0x81, 0x8, 0xfffffffd}, {0x8001, 0x2, 0x80, 0x6}, {0x9, 0x1, 0x20, 0x6}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x1000, 0x40, 0x81, 0x3}, {0xff, 0x0, 0x4, 0x1}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x8c8}, 0x1, 0x0, 0x0, 0x91}, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') shmctl$IPC_RMID(r2, 0x0) 21:01:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000040)=0x21) 21:01:21 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:21 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x50000, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000180)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) 21:01:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, r2, 0x10, 0x1, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, [], 0x1}, 0x1}}}, 0xa0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x600, 0x0) write$smackfs_ipv6host(r3, &(0x7f0000000280)=@l2={{0x2, 0x3a, 0x4, 0x3a, 0x7, 0x3a, 0x9, 0x3a, 0x10000, 0x3a, 0x1, 0x3a, 0x2, 0x3a, 0xee}, 0x2f, 0x92d, 0x20, '/dev/autofs\x00'}, 0xba) 21:01:21 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r2, 0x3e000) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="c3d13e93", @ANYRES16=r1, @ANYBLOB="200025bd7000ffdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0005000000080001007063690011000200303030303a30303a31302e300000000008000b00ffffffff0e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00000001000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b007f000000"], 0xac}, 0x1, 0x0, 0x0, 0x40800}, 0x4001) 21:01:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) 21:01:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r3, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r5, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000000340)=0x80000000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r6, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) syz_init_net_socket$ax25(0x3, 0x3, 0xcb) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x154, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7a9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000050) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:21 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x20}, [@default, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) syz_init_net_socket$ax25(0x3, 0x0, 0xc4) 21:01:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) 21:01:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x1f, 0x4) 21:01:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 21:01:21 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) 21:01:21 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:22 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x284000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 21:01:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmctl$IPC_RMID(r2, 0x0) 21:01:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) socket$inet_sctp(0x2, 0x0, 0x84) 21:01:22 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x3000, 0x78001000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f0000000140)=@l2={{0x6, 0x3a, 0x1, 0x3a, 0x800000000, 0x3a, 0x20, 0x3a, 0x7, 0x3a, 0x4, 0x3a, 0x1, 0x3a, 0x3ff}, 0x2f, 0x3}, 0xae) r1 = geteuid() r2 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x1, 0x0, 0xee00, r1, 0xffffffffffffffff, 0x40, 0x3f}, 0x1, 0xc7bd, 0x803, 0x3, 0xffffffffffffffff, r2, 0x8}) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000000)=""/158) 21:01:22 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x3, @none, 0x7, 0x1}, 0xe) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r2, 0xf}}, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:22 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x200) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) 21:01:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmctl$IPC_RMID(r2, 0x0) 21:01:22 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) getsockname(r0, &(0x7f0000000080)=@can={0x1d, 0x0}, &(0x7f0000000100)=0x80) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x701000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000001740)={'ip6_vti0\x00', &(0x7f00000016c0)={'sit0\x00', r1, 0x29, 0x3, 0xa8, 0x4, 0x8, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x40, 0x1f, 0x8a1b}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001800)={'ip6_vti0\x00', &(0x7f0000001780)={'ip6gre0\x00', r1, 0x2f, 0x9, 0x81, 0x40, 0x48, @private2={0xfc, 0x2, [], 0x1}, @loopback, 0x40, 0x7800, 0x9, 0x5002}}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r8, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r10, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r8, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80404}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001840)={0x280, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xbbb}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xffffc81c}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r1}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xded6}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="98000000c509e054c95c35b49e79545fbf06ff62f2587c11f53f214f3d75ca3aefa53be826010456000025adc71e9fc961456ec2f884a901c9a72042ef3b275647afd5142609b7b81ddef32ea2d9a563023801a40d912e3ddead4ffaffffff9c321e8e40ef94e00e323485f97472ffbae2d2857d94f4396f47334ebec0269a775f09e22ff6821405c6e4499e87eec6e9ec440103542cc6373ab1768812df509d5ab494a8e5c09361f12916000066a32ea42fbf4cec06dd0b5085f003917fe019c080ab5c3ab3b609d087447201c3c59914fa188fce1683b5d705223081000de8fd4333602a31c2d3413ac0dc6d47502749", @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf2506000000080001007063690011000200303030303a30303a31302e300000000008000300000000000600040000000000080001007063690011000200303030303a30303a31302e300000000008000300020000000600040001000000080001007063690011000200303030303a30303a31302e300000000008000300000000000600040001000000"], 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) bind$ax25(r2, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x3, 0x4) 21:01:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x3c1800, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6d}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x301800, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000040)={0x8, [0xde0, 0x20, 0x89, 0x2, 0xff7f, 0x5a, 0x6, 0x3f]}, &(0x7f0000000080)=0x14) 21:01:22 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x908c0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x101, 0x400000) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000000c0)=[{0x1, 0x2, {0x2, 0x0, 0x2}, {0x2, 0x0, 0x4}, 0xfe, 0xff}, {0x2, 0x3, {0x1, 0x1, 0x1}, {0x1, 0xf0, 0x1}, 0x1, 0xfd}, {0x0, 0x3, {0x1, 0x0, 0x4}, {0x0, 0xff, 0x1}, 0xfe, 0xfd}], 0x60) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) 21:01:22 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 21:01:22 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)=0x1) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @bcast, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@local, @in6=@private2}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) 21:01:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmctl$IPC_RMID(r2, 0x0) 21:01:22 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)) 21:01:22 executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r2, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="63202a3a03207700703f0c2826eb6ee7aecd74455cbb797028858c8618ab7697e73ada4966"], 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r8, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x1f8, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r3}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r10}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x7, 0x40}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000084}, 0x80) 21:01:22 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 21:01:23 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) 21:01:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000000)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r3, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r5, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x3d0, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x642}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x200, 0x9, 0x0, 0x9}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xed85}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xe9db}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x62f}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x4000}, 0x40040c0) 21:01:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000880)=""/158, 0x9e}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f0000000200)=""/215, 0xd7}], 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000880000000000000000000000006800800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000816d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffb7c895d942800e740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000885eb7bf80549b90f3991109b53553b256b9704ef292bfa4dc1a6700c829c87a0b4507d781f66eb20e486cae24cb442b2d5a52ca51e065132c753879aa9dca2752a842313164c6f64564e40080c9c700"/1180], 0x448, 0x10001}, 0x38, 0x2040) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x400000, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140)=0x7, 0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0xe188, 0x4) 21:01:23 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf390800004006001d00018000000600eeffffff0000050022000100000005001300d50010006df6a2562c210968a7386b610b0819b27ce1e49cc2e6972ff214f7c0474a905b89619b51d671d75908c3e6474ffc9365cfa48169c2b4a31029f8429221a1dd5dc6b8694cee1fd0c91dfa3cc1dfeb373d78ab55afbddd7ce27319d674b4c86a1298334862780f"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 21:01:23 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/20) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = getuid() r3 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r5 = getpid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{0x1, r2, r3, r4, 0xffffffffffffffff, 0xc0, 0xfffe}, 0xfffff56a, 0x100000001, 0x101, 0x2, r5, 0x0, 0x80}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x8, 0x5, "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", 0x20, 0x9, 0x2, 0x8, 0x1, 0x4, 0x9}, r6}}, 0x120) 21:01:23 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) bind$ax25(r0, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @default]}, 0x48) r1 = accept4$ax25(r0, &(0x7f0000000080)={{}, [@default, @rose, @remote, @default, @default, @null, @rose, @null]}, &(0x7f0000000100)=0x48, 0xc0000) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000140)={@null, @null, 0x2, 0x44}) 21:01:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) shmat(0x0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 21:01:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'syztnl0\x00', 0x0, 0x29, 0x71, 0x3f, 0x7, 0x24, @mcast1, @remote, 0x8000, 0x700, 0xdee, 0x1f}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xf8, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xdc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0xd, 0x8, 0x80, 0x2}, {0x0, 0x8, 0x50, 0x4}, {0xfff, 0x5, 0x80}, {0x8, 0x1c, 0x3, 0x1f}, {0x81, 0x3, 0x4, 0x8}, {0xfff, 0x81, 0x20, 0x60}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1000}}}]}}]}, 0xf8}}, 0x8000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x581400, 0x0) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x501002, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200)=0x3, 0x4) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x104, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x58a4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000004) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:23 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) 21:01:23 executing program 4: shmctl$IPC_SET(0x0, 0x6, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 21:01:24 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 21:01:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) shmat(0x0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 21:01:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r2, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r6, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r8, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x368, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x86}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x54, 0x4, [{0x8001, 0x3, 0xd, 0x9}, {0xba, 0x80, 0x0, 0x200}, {0x0, 0x81, 0x2, 0xe7}, {0x8, 0x7, 0x3, 0x7}, {0x400, 0x3f, 0x10, 0xffff}, {0x6, 0x7f, 0x2, 0xfffffff8}, {0x1, 0x20, 0x4, 0xff}, {0x8b10, 0x8, 0x0, 0x78d9}, {0xfe01, 0x7, 0x8, 0x6}, {0x3ff, 0x81, 0x6, 0x8}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x8000}, 0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:01:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:01:24 executing program 1: getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:24 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) bind$ax25(r0, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @default]}, 0x48) r1 = accept4$ax25(r0, &(0x7f0000000080)={{}, [@default, @rose, @remote, @default, @default, @null, @rose, @null]}, &(0x7f0000000100)=0x48, 0xc0000) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000140)={@null, @null, 0x2, 0x44}) 21:01:24 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:24 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) shmctl$IPC_RMID(0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{r1, r2+60000000}}, &(0x7f0000000080)) 21:01:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) shmat(0x0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 21:01:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000)) 21:01:24 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) socket(0x1d, 0x80000, 0x1) r0 = socket(0x11, 0xa, 0x7fffffff) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000040)=0x50) 21:01:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) shmat(0x0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 21:01:24 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_SET(r0, 0x6, 0x0) 21:01:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) 21:01:24 executing program 0: setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080)=0x3, 0x4) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r1, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$cgroup_devices(r3, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'sit0\x00', r5, 0x29, 0x6, 0x1, 0x8001, 0x40, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr=' \x01\x00', 0x7, 0x700, 0x80000000, 0x7}}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x13, 0x0, &(0x7f0000000000)) 21:01:24 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000080)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 21:01:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmctl$IPC_RMID(r2, 0x0) 21:01:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3}, 0xe35) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:24 executing program 3: shmctl$IPC_SET(0x0, 0x6, 0x0) shmctl$IPC_RMID(0x0, 0x0) 21:01:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x4]}, &(0x7f0000000040)=0x6) 21:01:24 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmctl$IPC_RMID(r2, 0x0) 21:01:24 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) recvfrom$ax25(r1, &(0x7f0000000080)=""/164, 0xa4, 0x2041, &(0x7f0000000140)={{0x3, @bcast, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x200, 0x4) 21:01:25 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) 21:01:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:25 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8918, @mcast1, 0x5}, {0xa, 0x4e22, 0x5d9, @private0={0xfc, 0x0, [], 0x1}, 0x3}, r3, 0x3}}, 0x48) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r4, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffff81}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x867b}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffff390}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xfffffffb}}]}, 0x100}, 0x1, 0x0, 0x0, 0x2}, 0x40000) 21:01:25 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@netrom, @rose, @default, @rose, @bcast, @rose, @rose, @netrom]}, &(0x7f0000000080)=0x48, 0x800) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockname(r1, &(0x7f00000000c0)=@caif=@dgm, &(0x7f0000000140)=0x80) 21:01:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) 21:01:25 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:25 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) accept4$ax25(r1, 0x0, &(0x7f00000003c0), 0x80000) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x23c, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xffffffff}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xfffb}, {0x5}, {0x6, 0x11, 0x7f}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7f93}, {0x6, 0x16, 0x82}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0xfff}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0xe3cf}, {0x8, 0xb, 0x9}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x688f}, {0x8, 0xb, 0x62}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x401}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x100}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9e}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0xbbc3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x400}, {0x5}, {0x6, 0x11, 0x6}, {0x8}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40080}, 0x40040) 21:01:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x400, 0x7, 0x1, 0xff, 0x4, 0x6, 0x6}, 0xc) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) 21:01:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:25 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(0x0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90820880}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000af664b3ab2af", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fedbdf250100000000000500010000000c001000ff07000000000000"], 0xffffffffffffff61}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 21:01:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmctl$IPC_RMID(r2, 0x0) 21:01:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r2, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8010000", @ANYRES16=0x0, @ANYBLOB="c1102abd7000001a000000000000000000000000000000000000000000000000000000e56d2c294cb6a608c8c944c4da684f61106bbc1fb0b06aa91bc728ed83d9d752afb406cb376beec189d5cb3f73e5bf4f2284cd41b914022bd3765731ff42cfa907a83a66cf88ee60d524a40b9dae70f5d9ce0e06b9d4ae63c041b2151aa805616e43f5c528e03647a1af2d18f585a8ad9736b564d9d39f3a27c97d5fe4690e3f066536fc84d57373ea0202e73a4544cc4c4c6ecda0a3e22fd5", @ANYRES32=0x0, @ANYBLOB="fc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400050b000008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000008000100", @ANYRES32=r1, @ANYBLOB="c800028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r6, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r8, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="e8010000", @ANYRES16=0x0, @ANYBLOB="04002abd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="e50002803c00010024000100757365725f6c696e6b75705f656e61626c6564000000000000000000000000000500030006000000040004000800060058288b732cdd01c3b2c0dda1ffa1949f7f09f18559b0ec29c22a7ba4a3ab28ebe05ff5dff929ae51d9ac296d67c89f0067c3436c79406bb9a296144c4ca264f5ebc72f9710510a7446cc1c898dc82b6105c0b68642e1ac7b80bf492695e5a367e426d9386d53c51f54e0fe5ac8f92123a710f366ca292fc2f96ee0ae9725e107675c339a6d457ae385e77fde409776e4489509501ecff8849b2c31a542e11cb7f2ff6686d10318c1781944ca8582383f073d70b2200000007e78d54075", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400050b000008000600", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000008000100", @ANYRES32=r7, @ANYBLOB="c800028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000022c0)={&(0x7f0000001b00)={0x784, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xac2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7b9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x1, 0x9, 0xbf, 0x1ff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xa9d5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x784}, 0x1, 0x0, 0x0, 0x800}, 0x4c850) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) 21:01:25 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)='net_prio.ifpriomap\x00', 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffbc87}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000004) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0)={'geneve0', 0x32, 0x37}, 0xa) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 21:01:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x3, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) 21:01:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x12, 0x0, &(0x7f0000000040)) 21:01:26 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(0x0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmctl$IPC_RMID(r2, 0x0) 21:01:26 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) sendto$ax25(0xffffffffffffffff, &(0x7f0000000080)="d53dc9ec02b80c361ced1983c29bb9b7149e9d0eca667c395a002c6a2c67d755044f0fe330aebe07bfe2d2de9d0e946dca17ee1c8c5d0cd221c813dc038c2435549d0410a830560de262a674ad9006d125517ed267d617f76e784c9bf347837232c7bb1f86434e19a7f1b42df64bb4831b1ed0a9e1e82df75b5a2aa46570e8504e82dfe2c683b83e1853fa1fcb67d532169908e955172da27fcc8b4a71dd9c62467f700524baf65987dc5e4a2602752dc10ba11c1d4b8d62ba16e87b7716771c24e1d87dfe3ee88d6ebc91", 0xcb, 0x800, &(0x7f0000000180)={{0x3, @null, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:26 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000084) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000c7f1", @ANYRES16=r2, @ANYBLOB="1c0d2dbd7000fedbdf250100000008001800e000000205001300850000000c001600ff7f00000000000008001800ac1414bb"], 0x38}, 0x1, 0x0, 0x0, 0xa5397d47ae58a3f2}, 0x810) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:26 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(0x0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:26 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x5d, 0x1, 0x2, 0x1a, @local, @private2={0xfc, 0x2, [], 0x1}, 0x7, 0x8000, 0x7, 0x1}}) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:26 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffff}, [@default, @bcast, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4080, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xff, 0x280401) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426bd7000fbdbdf25030000000c00040008000000000000004400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08917b0046dcb63a463345ec50c5b0c9b5b49cf181de703a69747941891723fd9463c2d0e2a3ab7882521355a9d2e5064ddeaaa07f9a64a6fc5fca883d740d1371", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0008000400000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4801}, 0x4000) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x81, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_team\x00'}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x56}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) 21:01:26 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) 21:01:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmctl$IPC_RMID(r2, 0x0) 21:01:26 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) 21:01:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4082, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), 0x4) 21:01:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x200080a0}, 0x80) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:26 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) 21:01:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) 21:01:26 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) 21:01:26 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f00000003c0)=""/69, 0x45}], 0x3, &(0x7f0000000480)=""/147, 0x93}, 0x2002) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r2, &(0x7f0000000100)=@can, &(0x7f0000000180)=0x80) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cachefiles\x00', 0x80000, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x20000000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f00000007c0)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) sendmsg$NBD_CMD_STATUS(r4, 0x0, 0x0) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000700)=[{0x0, 0x1, {0x0, 0x0, 0x1}, {0x0, 0xf0, 0xde0d352361b5097a}, 0x0, 0x1}, {0x3, 0x3, {0x0, 0x0, 0x2}, {0x1, 0x0, 0x4}}, {0x1, 0x0, {0x2, 0xf0, 0x4}, {0x0, 0xff, 0x1}, 0xfd, 0xfe}, {0x0, 0x2, {0x1, 0x0, 0x2}, {0x0, 0x1}, 0x1}], 0x80) bind$ax25(r1, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 21:01:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x1e8, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xffff1c74}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x616d}, {0x5}, {0x6, 0x11, 0x1353}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa91}, {0x6, 0x16, 0xa8e0}, {0x5}, {0x6}, {0x8, 0xb, 0x7}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x40}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x804a}, {0x8, 0xb, 0x62b1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x9cff}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x1f3}, {0x6, 0x16, 0xfffe}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1000}, {0x8}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4}, 0x20000090) write$cgroup_devices(r1, &(0x7f0000000100)={'a', ' *:* ', 'rm\x00'}, 0x9) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000300)={0xc8, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7ff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3f}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xc95}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008040) openat$cgroup_devices(r2, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0x39, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x170bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000003) 21:01:26 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) 21:01:27 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) 21:01:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) shmat(0x0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 21:01:27 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 21:01:27 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xb}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bind$ax25(r1, &(0x7f0000000240)={{0x3, @default, 0x5}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) 21:01:27 executing program 0: mq_unlink(&(0x7f0000000000)='&+\x00') socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000040)=0x24) 21:01:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 21:01:27 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) 21:01:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) shmat(0x0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 21:01:27 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 21:01:27 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000080)=0x1) 21:01:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) 21:01:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000240)=0x7, 0x4) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x20008000) 21:01:27 executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x40000) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)={0x4394, 0x7, [{0xb}, {0x9}, {0x9}, {0x2}, {0x5}, {0xb}, {0x2}]}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80040, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 21:01:27 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 21:01:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) shmat(0x0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 21:01:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) 21:01:27 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x20010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x118, &(0x7f0000000140), 0x0, 0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x400000, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10001005}, 0x4000040) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000080)={r2, r2, 0x9340, 0x6e, &(0x7f0000000000)="ba8ef0c4da0fe5655b0cdda11c193b5e191d438ac98d254bae57349b27a2a91cf8f4c2853724437ad5178a507b8fba65cac3fc741146f47849f46739a9eed92a28d758ebb17ffbb5b2c8fb56e5103e4d966136999b14290ab63b230dfcdd8ad946cf23e1c6cfd65179444d937ed8", 0x0, 0xff, 0x0, 0x81, 0xff81, 0x1, 0x6, 'syz0\x00'}) 21:01:27 executing program 1: ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000300)={0x8, 0x1, "7e827061fe1c8fa1455e04c84b9393b2df6b0184b11575fc911e94d7907d3053dcc5e37dd23245f160548d7aaf61176398e54e2220380234d1b0927d7b078b619081bb88f0dc11c8c28f7cf490d8fdb32f9d1d09b6e834be8961353f5bcbd6ff2443532e6079644bf01b1a656f5b3990e7a544e5c523ba454147765791c552bada3204f705eac06463483fc1c37091e7d58aa32d681f9b55fb8543e3e8b4e54d95f06ab948f2799a3794ba57fe69da7b22116a4887f87758469c5d47ba0093fd75ae8b567c68262a73f8862d8f4fb13c14f4ef5d068e10df198cb2b5b879836ca1af0c10e985ef73602e7e375b75b8c2fce2c5cb3ca95320f72d7a64692e0a7c"}) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000005, 0x8010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x118, &(0x7f00000000c0)=0x1, 0x0, 0x4) bind$ax25(r1, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) accept4$ax25(r2, &(0x7f00000001c0)={{0x3, @bcast}, [@bcast, @netrom, @rose, @netrom, @default, @null, @rose, @bcast]}, &(0x7f0000000240)=0x48, 0x80000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="63202a3a488ed255ab366e"], 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r6, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f0000000b40)={0x428, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x97}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7416}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x8, 0x80, 0x7, 0x20}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x38b1cf82}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfba5}}, {0x8, 0x6, r5}}}]}}]}, 0x428}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x158, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x72, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x8, 0x2, 0x7, 0x7}, {0x3ff, 0x7, 0x20, 0x8000}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8014}, 0x41) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={@default, @null, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]}) 21:01:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) 21:01:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0xa, [0x2, 0xa3, 0x4, 0x5, 0x8, 0x9, 0x4, 0x2, 0x3, 0x1]}, &(0x7f0000000080)=0x18) 21:01:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) 21:01:27 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000080)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x56}) 21:01:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x9, [0x7, 0x8000, 0x2000, 0xa9, 0x981, 0x2, 0x3, 0x4, 0x2]}, &(0x7f00000000c0)=0x16) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) 21:01:27 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000100)={r1, r0, 0x5, 0xcb, &(0x7f0000000000)="5161e3ce13c2fd94f98399024e59d690c082e2bb4acb52a5ce97c84ece252b89d22858b211720d4de6809f138cb160c81512603fff93d9336ad1d77f1ae3bfc47f643ac6c6b63ae02561551724136c86f44650f2b047f301cea093f7db3efac062be588702dbacab669dd7740722e28923fdc4cef8825c74e87d34579ec3509264d64024075c3b700b6bacae6a10c74c29fcb5328c3972c5638636cfca2b9fd2e0da695885110bb19a7789ffc625db2b34b918987c4f42325350461492fd34aed2001f6aa207bf15d6d7f5", 0x2, 0x6, 0x2, 0x3, 0x4, 0x2, 0x7f, 'syz0\x00'}) 21:01:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) 21:01:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) 21:01:28 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x3, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f00000000c0)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x20}) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:28 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:28 executing program 5: ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000300)={0x8, 0x1, "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"}) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000005, 0x8010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x118, &(0x7f00000000c0)=0x1, 0x0, 0x4) bind$ax25(r1, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) accept4$ax25(r2, &(0x7f00000001c0)={{0x3, @bcast}, [@bcast, @netrom, @rose, @netrom, @default, @null, @rose, @bcast]}, &(0x7f0000000240)=0x48, 0x80000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="63202a3a488ed255ab366e"], 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r6, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f0000000b40)={0x428, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x97}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7416}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x8, 0x80, 0x7, 0x20}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x38b1cf82}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfba5}}, {0x8, 0x6, r5}}}]}}]}, 0x428}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x158, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x72, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x8, 0x2, 0x7, 0x7}, {0x3ff, 0x7, 0x20, 0x8000}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8014}, 0x41) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={@default, @null, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]}) 21:01:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x234, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2000000}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x30}, {0x6}, {0x5}, {0x6, 0x11, 0x228}, {0x8, 0xb, 0x10001}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7efa0a72}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x100}, {0x8, 0xb, 0xf63}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x271a}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x16, 0x7ff}, {0x5}, {0x6, 0x11, 0x7f}, {0x8, 0xb, 0x7ff}}]}, 0x234}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x511, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa0}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, [], 0x1}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8014) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc50}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x60b8}]}, 0x48}}, 0x10) 21:01:28 executing program 2: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x55a, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0xdc6, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r1, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r3 = socket(0x2e, 0x6, 0xcf1) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000080)=[{0x2, 0x1, {0x2, 0x0, 0x4}, {0x0, 0xf0, 0x1}, 0xff, 0x1}, {0x0, 0x2, {0x0, 0xf0, 0x1}, {0x0, 0xf0, 0x2}, 0x1, 0xfe}, {0x1, 0x2, {0x2, 0xff}, {0x1, 0xff, 0x2}, 0x1, 0x1}, {0x0, 0x1, {0x1, 0x0, 0x3}, {0x2, 0x1, 0x7}, 0x2, 0x1}, {0x3, 0x2, {0x1, 0xf0, 0x4}, {0x2, 0xff, 0x1}, 0xff, 0xfe}, {0x1, 0x2, {0x1, 0x1}, {0x1, 0x0, 0x3}, 0xfd, 0xff}, {0x2, 0x2, {0x2, 0x1, 0x4}, {0x2, 0xff}, 0xfe, 0x2}, {0x0, 0x3, {0x0, 0x0, 0x1}, {0x1, 0xff, 0x1}, 0x0, 0xff}, {0x80000001, 0x3, {0x0, 0x0, 0x2}, {0x2, 0x1, 0x4}, 0xff, 0xfe}, {0x0, 0x1, {0x2, 0x0, 0x1}, {0x2, 0x0, 0x4}, 0x0, 0x1}], 0x140) 21:01:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) 21:01:28 executing program 1: socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:28 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:28 executing program 5: ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000300)={0x8, 0x1, "7e827061fe1c8fa1455e04c84b9393b2df6b0184b11575fc911e94d7907d3053dcc5e37dd23245f160548d7aaf61176398e54e2220380234d1b0927d7b078b619081bb88f0dc11c8c28f7cf490d8fdb32f9d1d09b6e834be8961353f5bcbd6ff2443532e6079644bf01b1a656f5b3990e7a544e5c523ba454147765791c552bada3204f705eac06463483fc1c37091e7d58aa32d681f9b55fb8543e3e8b4e54d95f06ab948f2799a3794ba57fe69da7b22116a4887f87758469c5d47ba0093fd75ae8b567c68262a73f8862d8f4fb13c14f4ef5d068e10df198cb2b5b879836ca1af0c10e985ef73602e7e375b75b8c2fce2c5cb3ca95320f72d7a64692e0a7c"}) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000005, 0x8010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x118, &(0x7f00000000c0)=0x1, 0x0, 0x4) bind$ax25(r1, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) accept4$ax25(r2, &(0x7f00000001c0)={{0x3, @bcast}, [@bcast, @netrom, @rose, @netrom, @default, @null, @rose, @bcast]}, &(0x7f0000000240)=0x48, 0x80000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="63202a3a488ed255ab366e"], 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r6, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f0000000b40)={0x428, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x97}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7416}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x8, 0x80, 0x7, 0x20}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x38b1cf82}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfba5}}, {0x8, 0x6, r5}}}]}}]}, 0x428}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x158, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x72, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x8, 0x2, 0x7, 0x7}, {0x3ff, 0x7, 0x20, 0x8000}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8014}, 0x41) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={@default, @null, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]}) 21:01:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r1, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r3, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r7, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r9, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)=ANY=[@ANYBLOB="e8010000", @ANYRES16=0x0, @ANYBLOB="04002abd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b75700000000000000000000000000000000000000000000500739d7c19ca945d60040008000600", @ANYRES32=r8, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400050b000008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000008000100", @ANYRES32=r8, @ANYBLOB="c800028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000017c0)={0x5d0, 0x0, 0x802, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xe17d}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6b}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9b}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x98, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x6, 0x3f, 0x8, 0x4}, {0x80, 0x0, 0x1, 0x2}, {0x1, 0x80, 0x1f, 0x5}, {0x6, 0x9, 0x6, 0x4}]}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x5d0}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0xef400000, 0x4) 21:01:28 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(0x0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:28 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xb}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bind$ax25(r1, &(0x7f0000000240)={{0x3, @default, 0x5}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) 21:01:28 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) 21:01:28 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:28 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(0x0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:28 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xb}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bind$ax25(r1, &(0x7f0000000240)={{0x3, @default, 0x5}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) 21:01:28 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) 21:01:28 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) accept$ax25(r1, 0x0, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040)=0xfffff800, 0x4) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000000)) 21:01:29 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xb}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bind$ax25(r1, &(0x7f0000000240)={{0x3, @default, 0x5}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) 21:01:29 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/partitions\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000001300), &(0x7f0000001340)=0x6) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000001380), &(0x7f00000013c0)=0x8) recvmsg$qrtr(r2, &(0x7f0000001280)={&(0x7f0000000080), 0xc, &(0x7f0000001240)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/152, 0x98}, {&(0x7f0000001180)=""/148, 0x94}], 0x3, 0x0, 0x0, 0x40004000}, 0x38, 0x101) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 21:01:29 executing program 2: sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x17c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x40) socket$inet_sctp(0x2, 0x5, 0x84) 21:01:29 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(0x0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:29 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) 21:01:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000b08d20d9398a621ab021be6013cb2e19bf73c3284df44913878276b3eb1777bc0c6455aca9cf379c7fd42510beceb6ecf3f2c019bfb516b5f673364cf74bad1c02df99b7830edbbbfda05e42f1f84011bd4ca77f538aaec232ae9774323223a22503d5a69f1bb1577a501e8e38bbce9dff00d58965c80f0660dc19d0c93ea9eb0fb99c3f2b3250329eb9ca6faa135bc7357c1c429cdf8b72e2220e5f5619052f1da950e46c85974fece5fe54f9141f", @ANYRES16=r1, @ANYBLOB="010000000000000000000600000005000d000000000006000100000000001400080076657468305f766c616e0000000000000c0010000000000000000000"], 0x44}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x2, 0x70bd25, 0x25dfdbfd}, 0xfffffffffffffdca}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000884) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x3, [@bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}) socket$inet_sctp(0x2, 0x1, 0x84) 21:01:29 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f00000001c0)=0x6) bind$ax25(r0, &(0x7f0000000000)={{0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = semget(0x1, 0x0, 0x7b6) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f00000000c0)=""/234) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000080)=0x7fff) 21:01:29 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xb}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) getsockname(r2, &(0x7f0000000000)=@caif=@util, &(0x7f00000000c0)=0x80) 21:01:29 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) 21:01:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 21:01:29 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$qrtr(0x2a, 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:29 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xb}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') syz_init_net_socket$ax25(0x3, 0x2, 0x0) 21:01:29 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x3}, 0xe) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 21:01:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xd8, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000800}, 0xb3e055f4ef9ccd82) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r1, r5, 0x0, r1}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x33}}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x1b8320c8f509eb22}, 0x40811) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:29 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) 21:01:29 executing program 0: munlockall() r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000040)={':}'}, 0x3) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) 21:01:29 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xb}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$qrtr(0x2a, 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4004040) 21:01:29 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) 21:01:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 21:01:29 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 21:01:30 executing program 1: munlockall() r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000040)={':}'}, 0x3) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) 21:01:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbc62506a2c7db68800cccd724100006001b004e22000008001100000000000c001600060000000000000008000c00010000000c001000ff0300000000000006000200010000000500070003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8024) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x5, 0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:30 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:30 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 21:01:30 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f00000001c0)=0x6) bind$ax25(r0, &(0x7f0000000000)={{0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = semget(0x1, 0x0, 0x7b6) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f00000000c0)=""/234) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000080)=0x7fff) 21:01:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x0, 0x1000]}, &(0x7f0000000040)=0x8) 21:01:30 executing program 1: munlockall() r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000040)={':}'}, 0x3) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) 21:01:30 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 21:01:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x40010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x5, 0x2, 0x0, 0x2, 0x0, 0x1}, 0x3) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000080), 0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:30 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000b08d20d9398a621ab021be6013cb2e19bf73c3284df44913878276b3eb1777bc0c6455aca9cf379c7fd42510beceb6ecf3f2c019bfb516b5f673364cf74bad1c02df99b7830edbbbfda05e42f1f84011bd4ca77f538aaec232ae9774323223a22503d5a69f1bb1577a501e8e38bbce9dff00d58965c80f0660dc19d0c93ea9eb0fb99c3f2b3250329eb9ca6faa135bc7357c1c429cdf8b72e2220e5f5619052f1da950e46c85974fece5fe54f9141f", @ANYRES16=r1, @ANYBLOB="010000000000000000000600000005000d000000000006000100000000001400080076657468305f766c616e0000000000000c0010000000000000000000"], 0x44}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x2, 0x70bd25, 0x25dfdbfd}, 0xfffffffffffffdca}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000884) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x3, [@bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}) socket$inet_sctp(0x2, 0x1, 0x84) 21:01:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) write$smackfs_label(r1, &(0x7f0000000100), 0x1) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f00000000c0)=0x1) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r2, &(0x7f0000000000)=@tipc, &(0x7f0000000080)=0x80) 21:01:30 executing program 1: munlockall() r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000040)={':}'}, 0x3) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) 21:01:30 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 21:01:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ffed", @ANYRES16=r1, @ANYBLOB="000429bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x41014}, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x9, 0x40, 0x16, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={[], [], @loopback}, 0x80, 0x10, 0x80, 0x9}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r5, &(0x7f0000000200)={'c', ' *:* ', 'w\x00'}, 0xffffffd8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r7, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000014c0)={&(0x7f0000001040)={0x444, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3e}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0xd5}, 0x11) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x2, 0x0) recvmsg$qrtr(r11, &(0x7f0000000940)={&(0x7f0000000540), 0xc, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/5, 0x5}, {&(0x7f00000005c0)=""/242, 0xf2}], 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="d8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000008912fe6654c400"/546], 0x228, 0x40}, 0x38, 0x40010022) 21:01:30 executing program 5: shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:30 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:30 executing program 1: munlockall() r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r1, &(0x7f0000000040)={':}'}, 0x3) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@none, 0x2}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:30 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(0x0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:30 executing program 5: shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:30 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r2, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r6, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r8, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x31c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0xfffc, 0x1, 0x20, 0x3}, {0x3, 0x24, 0x1, 0x6}, {0x8129, 0x8, 0x80, 0x7ff}, {0x3, 0x8, 0x1}, {0x7ff, 0x5, 0x1f, 0x8}]}}}]}}, {{0x8, 0x1, r4}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x44}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x31c}, 0x1, 0x0, 0x0, 0x24000004}, 0x8000) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r11, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:30 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000340), &(0x7f0000000380)=0x4) 21:01:30 executing program 1: munlockall() socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':}'}, 0x3) 21:01:31 executing program 5: shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:31 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x4) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f00000003c0)=""/69, 0x45}], 0x3, &(0x7f0000000480)=""/147, 0x93}, 0x2002) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r2, &(0x7f0000000100)=@can, &(0x7f0000000180)=0x80) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cachefiles\x00', 0x80000, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x20000000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f00000007c0)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) sendmsg$NBD_CMD_STATUS(r4, 0x0, 0x0) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000700)=[{0x0, 0x1, {0x0, 0x0, 0x1}, {0x0, 0xf0, 0xde0d352361b5097a}, 0x0, 0x1}, {0x3, 0x3, {0x0, 0x0, 0x2}, {0x1, 0x0, 0x4}}, {0x1, 0x0, {0x2, 0xf0, 0x4}, {0x0, 0xff, 0x1}, 0xfd, 0xfe}, {0x0, 0x2, {0x1, 0x0, 0x2}, {0x0, 0x1}, 0x1}], 0x80) bind$ax25(r1, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x3, 0x4) 21:01:31 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:31 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) 21:01:31 executing program 1: munlockall() socket$inet_sctp(0x2, 0x1, 0x84) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000040)={':}'}, 0x3) 21:01:31 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:31 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x440c0}, 0x4000000) 21:01:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmctl$IPC_RMID(r2, 0x0) 21:01:31 executing program 4: shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:31 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:31 executing program 1: munlockall() socket$inet_sctp(0x2, 0x1, 0x84) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000040)={':}'}, 0x3) 21:01:31 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) 21:01:31 executing program 4: shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:31 executing program 1: munlockall() socket$inet_sctp(0x2, 0x1, 0x84) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000040)={':}'}, 0x3) 21:01:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) 21:01:31 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0xdc000, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:31 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) sendto$ax25(0xffffffffffffffff, &(0x7f0000000080)="d53dc9ec02b80c361ced1983c29bb9b7149e9d0eca667c395a002c6a2c67d755044f0fe330aebe07bfe2d2de9d0e946dca17ee1c8c5d0cd221c813dc038c2435549d0410a830560de262a674ad9006d125517ed267d617f76e784c9bf347837232c7bb1f86434e19a7f1b42df64bb4831b1ed0a9e1e82df75b5a2aa46570e8504e82dfe2c683b83e1853fa1fcb67d532169908e955172da27fcc8b4a71dd9c62467f700524baf65987dc5e4a2602752dc10ba11c1d4b8d62ba16e87b7716771c24e1d87dfe3ee88d6ebc91", 0xcb, 0x800, &(0x7f0000000180)={{0x3, @null, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:31 executing program 4: shmget$private(0x0, 0x1000, 0x78000064, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:31 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:31 executing program 1: munlockall() r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':}'}, 0x3) 21:01:31 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080025bd7000fcdbdf25050000000c00050021000000000000000cdb57757b0000800000000008000100000000000c000e0002000000000000000c00060000000000000000000c00060001000003000000000000000c0005000001000000009e2ca3712700"/123], 0x7c}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000010) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x1, 0x4) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="003ae8512a8b17e835776f367ac24200", @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf2500000000050012004000000008001800ac1414bb06001c007f0000000800110001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000001) 21:01:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r1, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r3, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r7, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r9, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4d6667c71720a76b8898fcdd302d06001972d60000ee337b40bb65e076658f95db4fc24548202afce8fdfc81ad1375a863788b91dcb9dbc202062e43df97142d9c137da3dcd8b9ac6039308d1f961298c9b8e9f5133311b3d6ff639de5fbb5df02", @ANYRES16=0x0, @ANYBLOB="04002abd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400050b000008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000008000100", @ANYRES32=r8, @ANYBLOB="c800028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f00000006c0)={0x41c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x43d}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4008004}, 0x80) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:31 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) sendto$ax25(0xffffffffffffffff, &(0x7f0000000080)="d53dc9ec02b80c361ced1983c29bb9b7149e9d0eca667c395a002c6a2c67d755044f0fe330aebe07bfe2d2de9d0e946dca17ee1c8c5d0cd221c813dc038c2435549d0410a830560de262a674ad9006d125517ed267d617f76e784c9bf347837232c7bb1f86434e19a7f1b42df64bb4831b1ed0a9e1e82df75b5a2aa46570e8504e82dfe2c683b83e1853fa1fcb67d532169908e955172da27fcc8b4a71dd9c62467f700524baf65987dc5e4a2602752dc10ba11c1d4b8d62ba16e87b7716771c24e1d87dfe3ee88d6ebc91", 0xcb, 0x800, &(0x7f0000000180)={{0x3, @null, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:32 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:32 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:32 executing program 1: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':}'}, 0x3) 21:01:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xa8bc, 0x680) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0xffff, 0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:32 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) sendto$ax25(0xffffffffffffffff, &(0x7f0000000080)="d53dc9ec02b80c361ced1983c29bb9b7149e9d0eca667c395a002c6a2c67d755044f0fe330aebe07bfe2d2de9d0e946dca17ee1c8c5d0cd221c813dc038c2435549d0410a830560de262a674ad9006d125517ed267d617f76e784c9bf347837232c7bb1f86434e19a7f1b42df64bb4831b1ed0a9e1e82df75b5a2aa46570e8504e82dfe2c683b83e1853fa1fcb67d532169908e955172da27fcc8b4a71dd9c62467f700524baf65987dc5e4a2602752dc10ba11c1d4b8d62ba16e87b7716771c24e1d87dfe3ee88d6ebc91", 0xcb, 0x800, &(0x7f0000000180)={{0x3, @null, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000380)={0x2, "93b29d"}, 0x6) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x101, 0xfffa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x5]}, &(0x7f0000000280)=0x14) 21:01:32 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:32 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:32 executing program 3: syz_init_net_socket$ax25(0x3, 0x5, 0xcc) sendto$ax25(0xffffffffffffffff, &(0x7f0000000080)="d53dc9ec02b80c361ced1983c29bb9b7149e9d0eca667c395a002c6a2c67d755044f0fe330aebe07bfe2d2de9d0e946dca17ee1c8c5d0cd221c813dc038c2435549d0410a830560de262a674ad9006d125517ed267d617f76e784c9bf347837232c7bb1f86434e19a7f1b42df64bb4831b1ed0a9e1e82df75b5a2aa46570e8504e82dfe2c683b83e1853fa1fcb67d532169908e955172da27fcc8b4a71dd9c62467f700524baf65987dc5e4a2602752dc10ba11c1d4b8d62ba16e87b7716771c24e1d87dfe3ee88d6ebc91", 0xcb, 0x800, &(0x7f0000000180)={{0x3, @null, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 21:01:32 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100)='net_prio.ifpriomap\x00', 0x2, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x8000, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x2, 0x2}}, 0x20) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x34742, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x301700, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, r5}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r6, r3}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e23, 0x4, @private1, 0x7fff}, r6}}, 0x38) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000000)) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000440)=0x1, 0x4) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x18000, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000380)=0x5, 0x4) 21:01:32 executing program 1: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':}'}, 0x3) 21:01:32 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x2000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:01:32 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:32 executing program 3: syz_init_net_socket$ax25(0x3, 0x5, 0xcc) 21:01:32 executing program 1: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':}'}, 0x3) 21:01:32 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000000)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080)=0x3, 0x4) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f00000000c0)=0x5, 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x438000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180)=0x101, 0x4) 21:01:32 executing program 5: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000000)=0x8, 0x0, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)=0x14) 21:01:32 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:32 executing program 3: syz_init_net_socket$ax25(0x3, 0x0, 0xcc) 21:01:32 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/246) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:32 executing program 5: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:32 executing program 1: r0 = openat$smackfs_syslog(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':}'}, 0x3) 21:01:32 executing program 0: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x2}, 0x8) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x0, 0x2, 0x1f, 0x2, 0x10001}) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000)=0x4, 0x4) 21:01:33 executing program 4: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x3a61, "bf6b74"}, 0x6) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) bind$ax25(r2, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 21:01:33 executing program 3: syz_init_net_socket$ax25(0x3, 0x0, 0xcc) 21:01:33 executing program 5: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:33 executing program 1: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000040)={':}'}, 0x3) 21:01:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000040)=0x7) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x4000) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x1, 0x4) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)={0x20, 0x40, 0x80, 0xa0, 0x4fc, 0x8a6, 0x18, 0x1, {0x0, 0xffffffff}, {0x0, 0x6}, {0x8, 0x7, 0x1}, {0x8, 0x9}, 0x3, 0x10, 0x4, 0xfff, 0x1, 0x2, 0x1, 0x1, 0x10000, 0x600, 0x24d, 0x4711a34f, 0x0, 0x1, 0x3, 0x7}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x9, 0x4) 21:01:33 executing program 4: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:33 executing program 3: syz_init_net_socket$ax25(0x3, 0x0, 0xcc) 21:01:33 executing program 1: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000040)={':}'}, 0x3) 21:01:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0xffffffffffffffa3) 21:01:33 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:33 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x54, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40d0}, 0x42001) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00'}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x208080) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000000043b5c64ff279eba339467503132e724dc206663d7cbadac744fcffb8ab384bda89899c6cdf05a4b837e2b5dcc0c468b75b5bd18cfa6d029a800165f4761090702a7024a7dbb9493e5dcbab8917cb4a57ec69e1fe3b3b96129aff04e807eb3e9fbf35a2ca2d99c1f4b694c82b40f69bfdde11002913c4d1816759264eb049edc1bc6f0d224b8c10ffff000000000000aded6e7c1722cf022c48911300", @ANYRES16=0x0, @ANYBLOB="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"], 0x144}}, 0x4000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r6, &(0x7f00000006c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000680)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r7, r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6f6, @rand_addr=' \x01\x00', 0xf0d1}, {0xa, 0x4e23, 0x10001, @private2={0xfc, 0x2, [], 0xfd}, 0x6}, r7, 0x6}}, 0x48) r8 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x1000, 0x600100) ioctl$FBIO_WAITFORVSYNC(r8, 0x40044620, 0x0) 21:01:33 executing program 4: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:33 executing program 1: openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(0xffffffffffffffff, &(0x7f0000000040)={':}'}, 0x3) 21:01:33 executing program 3: syz_init_net_socket$ax25(0x3, 0x5, 0x0) 21:01:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffff4b0c}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xda86}]}, 0xa0}}, 0x8000900) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000080)=0x8, 0x4) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="fba4030200000002000080"], &(0x7f0000000040)=0x8) 21:01:33 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:33 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200400, 0x0) 21:01:33 executing program 1: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:01:33 executing program 3: syz_init_net_socket$ax25(0x3, 0x5, 0x0) 21:01:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x7, 0x4) 21:01:33 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:33 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:33 executing program 3: syz_init_net_socket$ax25(0x3, 0x5, 0x0) 21:01:34 executing program 1: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:01:34 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(0x0) 21:01:34 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x56}) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)) 21:01:34 executing program 0: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:34 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:34 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:34 executing program 1: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) 21:01:34 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(0x0) 21:01:34 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) 21:01:34 executing program 2: socket$inet_sctp(0x2, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 21:01:34 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(0x0) 21:01:34 executing program 3: syz_init_net_socket$ax25(0x3, 0x5, 0x0) 21:01:34 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:34 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(0x0) 21:01:34 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(0x0) 21:01:34 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(0x0) 21:01:34 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:34 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000380)={0x2, "93b29d"}, 0x6) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x101, 0xfffa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x5]}, &(0x7f0000000280)=0x14) 21:01:34 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:34 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:34 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(0x0) 21:01:34 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x60004800) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x1ff, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)={0xa, [0x7, 0x6, 0x1, 0x8, 0x7f, 0x80, 0xffff, 0x0, 0x8000, 0xfbb8]}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0xd0, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 21:01:34 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000380)={0x2, "93b29d"}, 0x6) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x101, 0xfffa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x5]}, &(0x7f0000000280)=0x14) 21:01:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff1000/0xc000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 21:01:35 executing program 0: shmctl$IPC_SET(0x0, 0x6, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/16) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/4096) 21:01:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x81) shmctl$IPC_RMID(r2, 0x0) 21:01:35 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x81) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_SET(r2, 0x6, 0x0) 21:01:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000380)={0x2, "93b29d"}, 0x6) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x101, 0xfffa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x5]}, &(0x7f0000000280)=0x14) 21:01:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x81) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_SET(r2, 0x6, 0x0) 21:01:35 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x24000, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000300)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x88d641418e76aacc, 0x84) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000000c0)={r1, r2, 0x7f, 0xa3, &(0x7f0000000000)="7a3f9b0b0074ce6417148886e17f25315193838ef91cec5fb71bdcb9dd06fecf986bef3dd5cd83122db668f865c7c1377eca20e264c36ec578255ef42fe305b9a2b4981deff2f7d534d23de6f2b8846692d69ceb28925c19327f346693532ba1faf098381eedef131df633c59d8123ae4f280295c58231e4bf3d9e8d21111a8554302f1296f7e8d258ec712145b1a9c536072306fae83723f7df9b3dea427573499cc4", 0x1, 0xf9, 0x6662, 0x40, 0x0, 0x2, 0x431c, 'syz0\x00'}) r3 = syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x2, 0x521001) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000000280)) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000180)={0x190, 0x400, 0x190, 0xdd0, 0x8, 0x9, 0x10, 0x0, {0x8, 0x5, 0x1}, {0x955, 0x1db5}, {0xff, 0x100, 0x1}, {0xffff, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1f, 0x0, 0x2, 0xff, 0x1000, 0xffffffc0, 0x10, 0x4, 0x1, 0xa}) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x13, 0x0, &(0x7f0000000400)) 21:01:35 executing program 0: syz_init_net_socket$ax25(0x3, 0x0, 0x8) 21:01:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x81) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_SET(r2, 0x6, 0x0) 21:01:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000380)={0x2, "93b29d"}, 0x6) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x80, 0x0) 21:01:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)=0x4) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x46d00, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x80, 0x258, 0x800, 0x1e0, 0x7e3, 0x1, 0x8, 0x0, {0x9, 0x1fb}, {0x9, 0x1ff}, {0x2, 0xa6, 0x1}, {0x0, 0xc597}, 0x1, 0x100, 0xffff, 0x2, 0x1, 0x40, 0x40000005, 0x4, 0x1000, 0x6, 0x1c, 0x6, 0x10, 0x4, 0x0, 0x6}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r2, 0x4) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x6c, r3, 0x100, 0x7fffffff, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_batadv\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xae}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffff7e03}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008005) ioctl$FBIOBLANK(r2, 0x4611, 0x3) 21:01:35 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) write$smackfs_logging(r2, &(0x7f00000000c0)=0x2, 0x14) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:01:35 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) recvfrom$ax25(r0, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x81) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_SET(r2, 0x6, 0x0) 21:01:36 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:36 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, 0x0, 0x0) 21:01:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000380)={0x2, "93b29d"}, 0x6) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000380)={0x2, "93b29d"}, 0x6) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x80, 0x0) 21:01:36 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, &(0x7f0000000100)=""/209, 0xd1, 0x2, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 21:01:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x81) shmctl$IPC_RMID(r2, 0x0) 21:01:36 executing program 1: mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x1010, 0xffffffffffffffff, 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) 21:01:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000380)={0x2, "93b29d"}, 0x6) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x80, 0x0) 21:01:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000380)={0x2, "93b29d"}, 0x6) 21:01:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x81) 21:01:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000380)={0x2, "93b29d"}, 0x6) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x80, 0x0) 21:01:36 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)={'veth0_to_bridge', 0x32, 0x34}, 0x12) 21:01:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') 21:01:37 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x7, 0x0}, @null]}, 0x48) 21:01:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x81) 21:01:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x86, 0x4) 21:01:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000380)={0x2, "93b29d"}, 0x6) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x12, 0x0, &(0x7f0000000400)=0x4) 21:01:37 executing program 0 (fault-call:2 fault-nth:0): r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) shmat(r2, &(0x7f0000ff1000/0xc000)=nil, 0x4000) 21:01:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000380)={0x2, "93b29d"}, 0x6) 21:01:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:37 executing program 1 (fault-call:2 fault-nth:0): r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') [ 1520.530614][T29224] FAULT_INJECTION: forcing a failure. [ 1520.530614][T29224] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1520.562856][T29224] CPU: 1 PID: 29224 Comm: syz-executor.0 Not tainted 5.11.0-rc4-syzkaller #0 21:01:37 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':}'}, 0x3) [ 1520.571786][T29224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1520.581873][T29224] Call Trace: [ 1520.585537][T29224] dump_stack+0x183/0x22e [ 1520.589930][T29224] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1520.595688][T29224] ? show_regs_print_info+0x12/0x12 [ 1520.600930][T29224] ? __might_sleep+0x100/0x100 [ 1520.606872][T29224] ? __lock_acquire+0x5e40/0x5e40 [ 1520.611956][T29224] should_fail+0x384/0x4b0 [ 1520.616437][T29224] prepare_alloc_pages+0x1c5/0x5b0 [ 1520.621632][T29224] __alloc_pages_nodemask+0x129/0x5a0 21:01:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1520.627048][T29224] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 1520.632673][T29224] alloc_pages_vma+0x53f/0xde0 [ 1520.637481][T29224] do_anonymous_page+0x31b/0x14a0 [ 1520.642656][T29224] ? fault_around_bytes_set+0xb0/0xb0 [ 1520.648055][T29224] ? rcu_read_lock_sched_held+0x87/0x110 [ 1520.653744][T29224] handle_mm_fault+0x18ef/0x24f0 [ 1520.658754][T29224] ? finish_fault+0x210/0x210 [ 1520.663676][T29224] ? vmacache_find+0x1dc/0x5d0 [ 1520.668477][T29224] ? vmacache_update+0x9f/0xf0 [ 1520.673280][T29224] do_user_addr_fault+0x60f/0xb20 [ 1520.678360][T29224] exc_page_fault+0xa1/0x1e0 [ 1520.682984][T29224] ? asm_exc_page_fault+0x8/0x30 [ 1520.687998][T29224] asm_exc_page_fault+0x1e/0x30 [ 1520.692900][T29224] RIP: 0033:0x407069 [ 1520.697175][T29224] Code: ff bf 5e 32 4c 00 31 c0 e8 24 c7 ff ff bf 46 32 4c 00 31 c0 e8 18 c7 ff ff 0f 1f 84 00 00 00 00 00 55 53 48 81 ec 78 10 00 00 <48> 89 7c 24 08 bf 00 3a 4d 00 64 48 8b 04 25 28 00 00 00 48 89 84 [ 1520.718803][T29224] RSP: 002b:00007f3ae5f32bd0 EFLAGS: 00010202 [ 1520.725022][T29224] RAX: 0000000000407060 RBX: 000000000119bf80 RCX: 0000000000000000 [ 1520.733115][T29224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0 [ 1520.741204][T29224] RBP: 00007f3ae5f33ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1520.749208][T29224] R10: 0000000000000064 R11: 0000000000000000 R12: 0000000000000000 [ 1520.757215][T29224] R13: 00007ffdd082e62f R14: 00007f3ae5f349c0 R15: 000000000119bf8c [ 1520.861015][T29237] FAULT_INJECTION: forcing a failure. [ 1520.861015][T29237] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.890161][T29240] FAULT_INJECTION: forcing a failure. [ 1520.890161][T29240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 21:01:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) [ 1520.942515][T29237] CPU: 1 PID: 29237 Comm: syz-executor.4 Not tainted 5.11.0-rc4-syzkaller #0 [ 1520.952035][T29237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1520.963030][T29237] Call Trace: [ 1520.966488][T29237] dump_stack+0x183/0x22e [ 1520.970920][T29237] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1520.977030][T29237] ? show_regs_print_info+0x12/0x12 [ 1520.982274][T29237] ? __might_sleep+0x100/0x100 [ 1520.987101][T29237] ? __lock_acquire+0x5e40/0x5e40 [ 1520.992200][T29237] should_fail+0x384/0x4b0 [ 1520.996666][T29237] ? smk_write_syslog+0x29/0x90 [ 1521.001699][T29237] should_failslab+0x5/0x20 [ 1521.006235][T29237] __kmalloc_track_caller+0x86/0x330 [ 1521.011570][T29237] ? cap_capable+0x27e/0x2d0 [ 1521.016216][T29237] memdup_user_nul+0x26/0xf0 [ 1521.020862][T29237] smk_write_syslog+0x29/0x90 [ 1521.025589][T29237] ? smk_read_syslog+0xe0/0xe0 [ 1521.030395][T29237] vfs_write+0x289/0xc90 [ 1521.034691][T29237] ? __lock_acquire+0x5e40/0x5e40 21:01:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) [ 1521.039755][T29237] ? file_end_write+0x220/0x220 [ 1521.044656][T29237] ? __fget_files+0x34f/0x380 [ 1521.049390][T29237] ? mutex_lock_nested+0x1a/0x20 [ 1521.054383][T29237] ? __fdget_pos+0x24e/0x2f0 [ 1521.059101][T29237] ? ksys_write+0x72/0x2a0 [ 1521.063579][T29237] ksys_write+0x171/0x2a0 [ 1521.067965][T29237] ? __ia32_sys_read+0x80/0x80 [ 1521.072771][T29237] ? syscall_enter_from_user_mode+0x24/0x190 [ 1521.078804][T29237] ? syscall_enter_from_user_mode+0x24/0x190 [ 1521.085356][T29237] do_syscall_64+0x2d/0x70 [ 1521.089863][T29237] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1521.095836][T29237] RIP: 0033:0x45e219 [ 1521.099804][T29237] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1521.119504][T29237] RSP: 002b:00007f662cb9ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1521.128055][T29237] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1521.136091][T29237] RDX: 0000000000000003 RSI: 0000000020000040 RDI: 0000000000000003 [ 1521.144118][T29237] RBP: 00007f662cb9eca0 R08: 0000000000000000 R09: 0000000000000000 [ 1521.152133][T29237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1521.160135][T29237] R13: 00007ffda15d896f R14: 00007f662cb9f9c0 R15: 000000000119bf8c [ 1521.181669][T29240] CPU: 1 PID: 29240 Comm: syz-executor.1 Not tainted 5.11.0-rc4-syzkaller #0 [ 1521.190583][T29240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1521.200792][T29240] Call Trace: [ 1521.204101][T29240] dump_stack+0x183/0x22e [ 1521.208469][T29240] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1521.214346][T29240] ? show_regs_print_info+0x12/0x12 [ 1521.219615][T29240] ? __might_sleep+0x100/0x100 [ 1521.224634][T29240] ? __lock_acquire+0x5e40/0x5e40 [ 1521.229745][T29240] should_fail+0x384/0x4b0 [ 1521.234235][T29240] prepare_alloc_pages+0x1c5/0x5b0 [ 1521.239418][T29240] __alloc_pages_nodemask+0x129/0x5a0 [ 1521.244847][T29240] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 1521.250477][T29240] alloc_pages_vma+0x53f/0xde0 [ 1521.255289][T29240] do_anonymous_page+0x31b/0x14a0 [ 1521.260376][T29240] ? fault_around_bytes_set+0xb0/0xb0 [ 1521.265799][T29240] ? rcu_read_lock_sched_held+0x87/0x110 [ 1521.271489][T29240] handle_mm_fault+0x18ef/0x24f0 [ 1521.276531][T29240] ? finish_fault+0x210/0x210 [ 1521.281276][T29240] ? vmacache_find+0x1dc/0x5d0 [ 1521.286079][T29240] ? vmacache_update+0x9f/0xf0 [ 1521.290912][T29240] do_user_addr_fault+0x60f/0xb20 [ 1521.296086][T29240] exc_page_fault+0xa1/0x1e0 [ 1521.300710][T29240] ? asm_exc_page_fault+0x8/0x30 [ 1521.305890][T29240] asm_exc_page_fault+0x1e/0x30 [ 1521.310807][T29240] RIP: 0033:0x407069 [ 1521.314851][T29240] Code: ff bf 5e 32 4c 00 31 c0 e8 24 c7 ff ff bf 46 32 4c 00 31 c0 e8 18 c7 ff ff 0f 1f 84 00 00 00 00 00 55 53 48 81 ec 78 10 00 00 <48> 89 7c 24 08 bf 00 3a 4d 00 64 48 8b 04 25 28 00 00 00 48 89 84 [ 1521.334511][T29240] RSP: 002b:00007fb199083bd0 EFLAGS: 00010202 [ 1521.340616][T29240] RAX: 0000000000407060 RBX: 000000000119bf80 RCX: 0000000000000000 [ 1521.348712][T29240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0 [ 1521.356719][T29240] RBP: 00007fb199084ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1521.364725][T29240] R10: 0000000000000064 R11: 0000000000000000 R12: 0000000000000000 [ 1521.372736][T29240] R13: 00007ffd27f3c95f R14: 00007fb1990859c0 R15: 000000000119bf8c 21:01:38 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) [ 1521.801724][ T1647] oom_reaper: reaped process 29224 (syz-executor.0), now anon-rss:2048kB, file-rss:34824kB, shmem-rss:0kB 21:01:38 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48810) 21:01:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:38 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:38 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:38 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':}'}, 0x3) [ 1521.868825][ T1647] oom_reaper: reaped process 29240 (syz-executor.1), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 21:01:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) 21:01:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:38 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:38 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={'!}'}, 0x3) 21:01:38 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/16) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:38 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) r1 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x354, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x3, 0x1, 0x7, 0x8}, {0x6d, 0x3, 0x7, 0x4}, {0x0, 0x2, 0x0, 0x8}, {0x80, 0x7, 0x7, 0x252}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xd8d}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6cd0}}, {0x8}}}]}}]}, 0x354}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 21:01:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) 21:01:39 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000300)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:39 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={'\"}'}, 0x3) 21:01:39 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/239) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r3, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r5, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001d80)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001dc0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001ec0)=0xe8) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000001f00)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001f80)=""/238, 0xee}, {&(0x7f0000002080)=""/212, 0xd4}, {&(0x7f0000002180)=""/135, 0x87}, {&(0x7f0000002240)=""/33, 0x21}, {&(0x7f0000002280)=""/137, 0x89}, {&(0x7f0000002340)=""/189, 0xbd}, {&(0x7f0000002400)=""/143, 0x8f}, {&(0x7f00000024c0)=""/114, 0x72}, {&(0x7f0000002540)=""/36, 0x24}], 0x9}, 0x2000) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002680)={0x504, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x76}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0x2, 0x0, 0x0, 0x3f}, {0x8000, 0x81, 0xe8, 0x7}, {0x8, 0x40, 0x1, 0x2}, {0x5962, 0x9, 0xff, 0x80000001}, {0x3, 0xf8, 0x3, 0xaa25}, {0x0, 0x7, 0x5, 0x7ff}, {0x23ca, 0xce, 0x5, 0x20}, {0xe3, 0x5, 0x6f, 0xbe}, {0x1ff, 0x3, 0x1, 0x200}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}]}, 0x504}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 21:01:39 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:39 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x1ac302, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x3, @private=0xa010100}}, 0x1e) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000100)=""/247) 21:01:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) 21:01:39 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={'\'}'}, 0x3) 21:01:39 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r2, 0xf000, 0x6f, &(0x7f0000000040)="5ac102aae02c2ef434243117e849d82b39a95183c43b97d860ed49d74cb8b5125c08340b7ab8af8102cb14d82296af723985ed6cfa22e08daf20fd3124e404a89f481c9564b76cb939c7e3a110d2e0ca25de018bc34316050e428d616d4088d443f5b822856c12bd936c2a19f4d323", 0x3, 0x5, 0x1, 0x1, 0x400, 0x2, 0x0, 'syz1\x00'}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:39 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:39 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0x0, 0x4044001}, 0x4040000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) 21:01:39 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={'-}'}, 0x3) 21:01:39 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) r1 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r3, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r7, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r9, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000003c0)={0x1e8, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x984}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000002300)={0x1c4, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffeff}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x40}}}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000810) 21:01:39 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:39 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x24080896) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000c, 0x20010, r0, 0x10000000) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') 21:01:39 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:39 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) 21:01:39 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={'/}'}, 0x3) 21:01:39 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:39 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:39 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:39 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:39 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={'\\}'}, 0x3) 21:01:39 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) 21:01:40 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x410001, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:40 executing program 1: shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r1, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)=ANY=[@ANYBLOB="e8010000", @ANYRES16=0x0, @ANYBLOB="04002abd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002803c00010024000100757365725f6c696e6b75705f656e61626c656400000000feff0000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400050b000008000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000008000100", @ANYRES32=r0, @ANYBLOB="c800028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r5, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r7, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f00000006c0)={0xa8c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4d}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9b}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xe46}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3c5}}}]}}, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x800}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x2, 0x7f, 0x3}, {0x7, 0x0, 0x58, 0x451936e6}, {0x6, 0x9, 0x0, 0x401}, {0x3, 0x55, 0x4, 0x6}, {0x1ff, 0x1, 0x1, 0x5}, {0x100, 0x7f, 0x6, 0x401}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x101, 0x4, 0x6b, 0xffffffe1}, {0x4, 0x1f, 0x1f, 0x2}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xc6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r9}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xd03}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x56}}, {0x8}}}]}}]}, 0xa8c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4001) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:40 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000300)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:40 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) 21:01:40 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:40 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':!'}, 0x3) 21:01:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:40 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) r1 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000000)=""/138) r2 = shmget$private(0x0, 0xe000, 0x54000060, &(0x7f0000ff2000/0xe000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) 21:01:40 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/246) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/111) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000340)=""/84) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f00000001c0)=""/227) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = geteuid() r4 = geteuid() r5 = getpid() r6 = getpid() shmctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x0, r3, 0xee00, r4, 0xffffffffffffffff, 0x109, 0x80d8}, 0xee, 0x7, 0x2, 0x4, r5, r6, 0x3ff}) r7 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r7, 0x0) shmctl$SHM_UNLOCK(r7, 0xc) 21:01:40 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':\"'}, 0x3) 21:01:40 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:40 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000000)) 21:01:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) 21:01:40 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:40 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x110, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001a00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001a40)={'team0\x00', 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r4, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in=@remote}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r5, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24048000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001d00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000022c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="68050000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="340102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="74000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000044000400090002df48a8000001800706018000000000ff05ffff00000101070000000000010090403f0000005ef47f0085fa000034ff810501000000080004054e0e00003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\"k', @ANYRES32=0x0, @ANYBLOB="4801028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff00000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400050000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400030040022000000002002c09fbffffff06000c81090000000000090400100000bf0080040600000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400d8070000080007000000000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=r3, @ANYBLOB="e401028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004008100000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400060000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r7, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400ff070245ffffffff40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004009fa8000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x568}, 0x1, 0x0, 0x0, 0x1}, 0x8000) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x2000) 21:01:40 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':\''}, 0x3) 21:01:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:40 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x8000000) 21:01:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) 21:01:41 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':/'}, 0x3) 21:01:41 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:41 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/30) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x1000) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/10) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:41 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) 21:01:41 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:41 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_UNLOCK(r1, 0xc) 21:01:41 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':\\'}, 0x3) 21:01:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:41 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) r1 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x40c000, 0x0) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x1010, r2, 0xc3000) socket$qrtr(0x2a, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14010100", @ANYRES16=r1, @ANYBLOB="020028bd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x20004000) 21:01:41 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:41 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) 21:01:41 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:41 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':}'}, 0x3) 21:01:41 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:41 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 21:01:41 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) 21:01:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 21:01:41 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:41 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':}', 0x2}, 0x3) 21:01:41 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) getgid() shmctl$SHM_LOCK(r0, 0xb) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') 21:01:41 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r1, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)={0x1e8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xb05}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x4000) write$cgroup_devices(r5, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/partitions\x00', 0x0, 0x0) openat$cgroup_devices(r7, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000004400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f00000041c0)=ANY=[@ANYBLOB="e8010000", @ANYRES16=0x0, @ANYBLOB="04002abd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75700000007baf12cd01f7131dda4a4fc571bb6d00000000000000000000000000000000000005", @ANYRES32=r6, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400050b000008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000008000100", @ANYRES32=r6, @ANYBLOB="c800028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x1e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\b\v\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fbdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="ec00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004004200000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="680202803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040001f0ffff3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400800000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="d401028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff7f00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004008000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040003000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000010000008000100", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004005e0500000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="27cc1f58aacffaae240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0040000800456dbddc7c12640400030000000800070000000000400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300030000000800040001000100080006009bf3af631fb6b8a0785827af26ad48f5514229c266f86113", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3401028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040001000100400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004009105000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004002000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004009003000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000004000008000100", @ANYRES32=0x0, @ANYBLOB="5c02028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400610000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004004000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r3, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400faffffff38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400d0dcf07e40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB], 0xb08}, 0x1, 0x0, 0x0, 0x20008000}, 0x4010) r10 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r10, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 21:01:41 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 21:01:41 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8, "3ed510"}, 0x6) 21:01:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 21:01:42 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':}', 0x21}, 0x3) 21:01:42 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') 21:01:42 executing program 0: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x0) clock_gettime(0x5, &(0x7f0000000000)) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:42 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 21:01:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x0) 21:01:42 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 21:01:42 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':}', 0xff}, 0x3) 21:01:42 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 21:01:42 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}]}, 0x70}}, 0x0) 21:01:42 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x141000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000044}, 0x801) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 21:01:42 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 21:01:42 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/65) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') socket$pppl2tp(0x18, 0x1, 0x1) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x3, @remote}}, 0x1e) 21:01:42 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 21:01:42 executing program 4: r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/syslog\x00', 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000040)={':}'}, 0x20000043) 21:01:42 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r3 = shmget$private(0x0, 0x6000, 0x1, &(0x7f0000ffa000/0x6000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$IPC_RMID(r2, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) r4 = shmget$private(0x0, 0x1000, 0x881, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000140)=""/4096) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000001240)=""/4096) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r6, 0x0) shmctl$SHM_STAT(r6, 0xd, &(0x7f0000001140)=""/194) 21:01:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 21:01:42 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x141000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000044}, 0x801) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') [ 1526.022927][T29511] ------------[ cut here ]------------ 21:01:42 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 21:01:42 executing program 1: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') [ 1526.066310][T29511] WARNING: CPU: 1 PID: 29511 at mm/page_alloc.c:4977 __alloc_pages_nodemask+0x4e5/0x5a0 [ 1526.133000][T29511] Modules linked in: 21:01:42 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') 21:01:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 1526.154702][T29511] CPU: 1 PID: 29511 Comm: syz-executor.4 Not tainted 5.11.0-rc4-syzkaller #0 [ 1526.211719][T29511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1526.264914][T29511] RIP: 0010:__alloc_pages_nodemask+0x4e5/0x5a0 21:01:43 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r3 = shmget$private(0x0, 0x6000, 0x1, &(0x7f0000ffa000/0x6000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$IPC_RMID(r2, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) r4 = shmget$private(0x0, 0x1000, 0x881, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000140)=""/4096) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000001240)=""/4096) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r6, 0x0) shmctl$SHM_STAT(r6, 0xd, &(0x7f0000001140)=""/194) 21:01:43 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) [ 1526.296584][T29511] Code: ab 09 00 e9 dd fd ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c eb fd ff ff 4c 89 ef e8 f4 aa 09 00 8b 74 24 18 e9 da fd ff ff <0f> 0b e9 f3 fd ff ff a9 00 00 08 00 75 16 8b 4c 24 1c 89 cb 81 e3 21:01:43 executing program 1: ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={@none, 0x10000}) r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x401, 0x10, &(0x7f0000000080)="445fb05af2cee5166bf3240620ce8d69", 0x9, 0x6, 0x1, 0x5, 0x7, 0x3, 0x1f, 'syz0\x00'}) shmctl$SHM_LOCK(r0, 0xb) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) 21:01:43 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') [ 1526.405425][T29511] RSP: 0018:ffffc90001e8fa60 EFLAGS: 00010246 [ 1526.451215][T29511] RAX: ffffc90001e8fae0 RBX: ffffc90001e8fae0 RCX: 0000000000000000 [ 1526.483456][T29511] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90001e8fb08 [ 1526.531181][T29511] RBP: ffffc90001e8fba0 R08: dffffc0000000000 R09: ffffc90001e8fae0 [ 1526.580978][T29511] R10: fffff520003d1f61 R11: 0000000000000000 R12: dffffc0000000000 [ 1526.610643][T29511] R13: 0000000000000012 R14: 1ffff920003d1f58 R15: 0000000000040cc0 [ 1526.634073][T29511] FS: 00007f662cb9f700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 1526.657779][T29511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1526.664800][T29511] CR2: 0000000000749138 CR3: 0000000021b76000 CR4: 00000000001506f0 [ 1526.683894][T29511] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1526.693671][T29511] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1526.717796][T29511] Call Trace: [ 1526.723035][T29511] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 1526.734904][T29511] ? alloc_pages_current+0x2e5/0x520 [ 1526.750221][T29511] kmalloc_order+0x40/0x130 [ 1526.778018][T29511] ? rcu_lock_release+0x5/0x20 [ 1526.791108][T29511] kmalloc_order_trace+0x15/0x70 [ 1526.808048][T29511] __kmalloc_track_caller+0x246/0x330 [ 1526.822264][T29511] ? cap_capable+0x27e/0x2d0 [ 1526.836108][T29511] memdup_user_nul+0x26/0xf0 [ 1526.849160][T29511] smk_write_syslog+0x29/0x90 [ 1526.869652][T29511] ? smk_read_syslog+0xe0/0xe0 [ 1526.889901][T29511] vfs_write+0x289/0xc90 [ 1526.894461][T29511] ? __lock_acquire+0x5e40/0x5e40 [ 1526.922139][T29511] ? file_end_write+0x220/0x220 [ 1526.928234][T29511] ? __fget_files+0x34f/0x380 [ 1526.932955][T29511] ? mutex_lock_nested+0x1a/0x20 [ 1526.938206][T29511] ? __fdget_pos+0x24e/0x2f0 [ 1526.943067][T29511] ? ksys_write+0x72/0x2a0 [ 1526.948406][T29511] ksys_write+0x171/0x2a0 [ 1526.952893][T29511] ? __ia32_sys_read+0x80/0x80 [ 1526.957905][T29511] ? syscall_enter_from_user_mode+0x24/0x190 [ 1526.964904][T29511] ? syscall_enter_from_user_mode+0x24/0x190 [ 1526.972378][T29511] do_syscall_64+0x2d/0x70 [ 1526.977483][T29511] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1526.983407][T29511] RIP: 0033:0x45e219 [ 1526.991586][T29511] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1527.018288][T29511] RSP: 002b:00007f662cb9ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1527.027345][T29511] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1527.037059][T29511] RDX: 0000000020000043 RSI: 0000000020000040 RDI: 0000000000000003 [ 1527.046434][T29511] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1527.055781][T29511] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1527.064075][T29511] R13: 00007ffda15d896f R14: 00007f662cb9f9c0 R15: 000000000119bf8c [ 1527.072280][T29511] Kernel panic - not syncing: panic_on_warn set ... [ 1527.079170][T29511] CPU: 0 PID: 29511 Comm: syz-executor.4 Not tainted 5.11.0-rc4-syzkaller #0 [ 1527.088147][T29511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1527.098922][T29511] Call Trace: [ 1527.102202][T29511] dump_stack+0x183/0x22e [ 1527.106543][T29511] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1527.112287][T29511] ? show_regs_print_info+0x12/0x12 [ 1527.117539][T29511] panic+0x2e1/0x850 [ 1527.121438][T29511] ? __kernel_text_address+0x93/0x100 [ 1527.126875][T29511] ? __warn+0x13e/0x270 [ 1527.131155][T29511] ? nmi_panic+0x90/0x90 [ 1527.135675][T29511] __warn+0x26a/0x270 [ 1527.139680][T29511] ? __alloc_pages_nodemask+0x4e5/0x5a0 [ 1527.145267][T29511] ? __alloc_pages_nodemask+0x4e5/0x5a0 [ 1527.150818][T29511] report_bug+0x1b1/0x2e0 [ 1527.155171][T29511] handle_bug+0x3d/0x70 [ 1527.159334][T29511] exc_invalid_op+0x16/0x40 [ 1527.163853][T29511] asm_exc_invalid_op+0x12/0x20 [ 1527.168746][T29511] RIP: 0010:__alloc_pages_nodemask+0x4e5/0x5a0 [ 1527.175190][T29511] Code: ab 09 00 e9 dd fd ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c eb fd ff ff 4c 89 ef e8 f4 aa 09 00 8b 74 24 18 e9 da fd ff ff <0f> 0b e9 f3 fd ff ff a9 00 00 08 00 75 16 8b 4c 24 1c 89 cb 81 e3 [ 1527.194958][T29511] RSP: 0018:ffffc90001e8fa60 EFLAGS: 00010246 [ 1527.201057][T29511] RAX: ffffc90001e8fae0 RBX: ffffc90001e8fae0 RCX: 0000000000000000 [ 1527.209456][T29511] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90001e8fb08 [ 1527.217920][T29511] RBP: ffffc90001e8fba0 R08: dffffc0000000000 R09: ffffc90001e8fae0 [ 1527.225898][T29511] R10: fffff520003d1f61 R11: 0000000000000000 R12: dffffc0000000000 [ 1527.233957][T29511] R13: 0000000000000012 R14: 1ffff920003d1f58 R15: 0000000000040cc0 [ 1527.241948][T29511] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 1527.247512][T29511] ? alloc_pages_current+0x2e5/0x520 [ 1527.252829][T29511] kmalloc_order+0x40/0x130 [ 1527.257341][T29511] ? rcu_lock_release+0x5/0x20 [ 1527.262113][T29511] kmalloc_order_trace+0x15/0x70 [ 1527.267183][T29511] __kmalloc_track_caller+0x246/0x330 [ 1527.272562][T29511] ? cap_capable+0x27e/0x2d0 [ 1527.277508][T29511] memdup_user_nul+0x26/0xf0 [ 1527.282106][T29511] smk_write_syslog+0x29/0x90 [ 1527.286786][T29511] ? smk_read_syslog+0xe0/0xe0 [ 1527.291577][T29511] vfs_write+0x289/0xc90 [ 1527.295833][T29511] ? __lock_acquire+0x5e40/0x5e40 [ 1527.300869][T29511] ? file_end_write+0x220/0x220 [ 1527.305751][T29511] ? __fget_files+0x34f/0x380 [ 1527.310449][T29511] ? mutex_lock_nested+0x1a/0x20 [ 1527.315411][T29511] ? __fdget_pos+0x24e/0x2f0 [ 1527.320019][T29511] ? ksys_write+0x72/0x2a0 [ 1527.324452][T29511] ksys_write+0x171/0x2a0 [ 1527.328797][T29511] ? __ia32_sys_read+0x80/0x80 [ 1527.333586][T29511] ? syscall_enter_from_user_mode+0x24/0x190 [ 1527.339576][T29511] ? syscall_enter_from_user_mode+0x24/0x190 [ 1527.345735][T29511] do_syscall_64+0x2d/0x70 [ 1527.350179][T29511] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1527.356090][T29511] RIP: 0033:0x45e219 [ 1527.360008][T29511] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1527.379636][T29511] RSP: 002b:00007f662cb9ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1527.388083][T29511] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1527.396140][T29511] RDX: 0000000020000043 RSI: 0000000020000040 RDI: 0000000000000003 [ 1527.404130][T29511] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1527.412100][T29511] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1527.420075][T29511] R13: 00007ffda15d896f R14: 00007f662cb9f9c0 R15: 000000000119bf8c [ 1527.428897][T29511] Kernel Offset: disabled [ 1527.433417][T29511] Rebooting in 86400 seconds..